[libvirt] [PATCH 0/12] Improve security driver handling & QEMU DAC management

Laine Stump laine at laine.org
Tue Jan 26 16:40:19 UTC 2010

On 01/24/2010 11:57 AM, Dan Kenigsberg wrote:
> Thanks for this series. However, it seems that we still have a problem
> when trying to save domain to a root-squashing nfs export.
> When using qemu directly, as a user with write permissions to that
> export, there is no problem. When using libvirt, libvirt tries to write
> its own state to the target file. I would not want to pre-create the
> target file as world redable.
> How about performing open(path, O_CREAT|O_TRUNC|O_WRONLY,
> S_IRUSR|S_IWUSR)) with the euid of the qemu process?

This sounds like what I did to fix storage volume creation on NFS:


I talked to Dan Berrange about it this morning, and he agrees that 
something similar can/should be done for domain save. I'm starting work 
on it now, and should have something you can try out within a day or two.

More information about the libvir-list mailing list