Page 1 of 1

Security Risk - guest additions

Posted: 5. Nov 2019, 16:09
by BillSmith504
HI,

Newbee here and I have searched before I posted!

So im using a WIN 10 machine Host and a Win 7 SP1 Guest.

To resolve a SYSTEM BASE DRIVER issue I have installed the guest additions, the system now has no conflicts and is running very well.

So I need Win7 to run a couple of old apps natively

There is no Internet connection available (both Cable unplugged and NAT disabled to guest) and the Guest is installed on its own HDD, I have disabled CLlpboard and Shares and Network but There is a USB drive enabled.

So As I understand it guest additions closes the gap between host and guest and I have a few questions :

1. guest additions means more risk and something could get back to the host ?
2. Do guest additions automatically override any options I have set in the VB setup ?

Re: Security Risk - guest additions

Posted: 5. Nov 2019, 18:47
by socratis
BillSmith504 wrote:1. guest additions means more risk and something could get back to the host ?
No. The only way that I know of that something could "escape" to the host was the graphics driver, it could get to the host's driver (crash it), and that hasn't been used in practice AFAIK.
BillSmith504 wrote:2. Do guest additions automatically override any options I have set in the VB setup ?
Not sure what options you're talking about here...

Re: Security Risk - guest additions

Posted: 5. Nov 2019, 19:11
by BillSmith504
socratis,

Thank you for the info.

So in my case as there is no INTERNET this greatly reduces "The only way that I know of that something could "escape" to the host was the graphics driver"

I mean the options for the Guest in the main VB application running on the host, it has sections/options for USB Shared folder etc.

So I meant does guest additions override my setup like "SHARED CLIPBOARD" and NETWORK ?

Overall then would agree something would have to be very clever to leap to the HOST with no Networking/Shares Enabled ?

Re: Security Risk - guest additions

Posted: 6. Nov 2019, 09:20
by socratis
The installation of the Guest Additions does not override the settings, it makes them possible, it enables them:
  • If you have SharedClipboard enabled in the VM Settings, it will not work unless you have properly installed GAs.
  • If you have SharedFolders enabled in the VM Settings, they will not work unless you have properly installed GAs.
BillSmith504 wrote:So in my case as there is no INTERNET this greatly reduces "The only way that I know of that something could "escape" to the host was the graphics driver"
Not greatly reduces, eliminates pretty much. ;)
BillSmith504 wrote:Overall then would agree something would have to be very clever to leap to the HOST with no Networking/Shares Enabled ?
If you have SharedFolders, and you get a virus in your VM, and you keep it in the shared folder on the Host, and you execute that virus from your Host, then it's not the 3rd party that's clever, it's you that's looking stupid trying to get the virus on purpose! :)

Re: Security Risk - guest additions

Posted: 6. Nov 2019, 11:43
by BillSmith504
socratis,

Thank you .. I appreciate it!

One last one using the VM Guest ... anything that is captured or created on that guest will be the same size and quality as if it had be captured or created on a "REAL" os install ?

I'm using some Video Capture and screen Capture to edit home video on the Guest you see so I want to know those files created will be the same ?

Re: Security Risk - guest additions

Posted: 6. Nov 2019, 12:10
by socratis
Bytes are bytes, be it real or virtual.

Re: Security Risk - guest additions

Posted: 6. Nov 2019, 13:00
by BillSmith504
Love it ... "Bytes are bytes"

Did assume so but nice to get conformation from someone that obviously knows their stuff!