[libvirt] [PATCH] spec: Restrict virt-login-shell usage
Jiri Denemark
jdenemar at redhat.com
Fri Nov 22 14:23:08 UTC 2013
On Fri, Nov 22, 2013 at 14:00:06 +0000, Daniel Berrange wrote:
> On Fri, Nov 22, 2013 at 02:57:36PM +0100, Jiri Denemark wrote:
> > https://bugzilla.redhat.com/show_bug.cgi?id=1033614
> >
> > As virt-login-shell is an SUID binary, we should restrict its usage to
> > just the users chosen by an administrator to use virt-login-shell as
> > their login shell. This can easily be done by making the binary
> > executable only by users from a new virtlogin group.
> >
> > Signed-off-by: Jiri Denemark <jdenemar at redhat.com>
> > ---
> > libvirt.spec.in | 8 +++++++-
> > 1 file changed, 7 insertions(+), 1 deletion(-)
> >
> ACK
Pushed, thanks.
Jirka
More information about the libvir-list
mailing list