[libvirt] [PATCH] (v2) avoid chowning domain devices if higer-level mgmt does it for us

Daniel P. Berrange berrange at redhat.com
Mon Nov 30 09:46:03 UTC 2009


On Sun, Nov 29, 2009 at 03:54:30PM +0200, Dan Kenigsberg wrote:
> Only now did I notice another problem with root_squasing nfs, unrelated
> to chown and unadressed by my patch: qemudDomainSave tries to create the
> target image file and write into it as root. How reasonable would it be
> to seteuid() to qemu user before doing so?

The trouble with directly doing  seteuid() is that it affects all
threads in the process, not just the thread doing the save() operation.
We would thus need to fork a tiny helper program before doing the 
seteuid() step to create the file.

Daniel
-- 
|: Red Hat, Engineering, London   -o-   http://people.redhat.com/berrange/ :|
|: http://libvirt.org  -o-  http://virt-manager.org  -o-  http://ovirt.org :|
|: http://autobuild.org       -o-         http://search.cpan.org/~danberr/ :|
|: GnuPG: 7D3B9505  -o-  F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505 :|




More information about the libvir-list mailing list