[libvirt] [PATCH] spec: Restrict virt-login-shell usage

Jiri Denemark jdenemar at redhat.com
Fri Nov 22 14:23:08 UTC 2013


On Fri, Nov 22, 2013 at 14:00:06 +0000, Daniel Berrange wrote:
> On Fri, Nov 22, 2013 at 02:57:36PM +0100, Jiri Denemark wrote:
> > https://bugzilla.redhat.com/show_bug.cgi?id=1033614
> > 
> > As virt-login-shell is an SUID binary, we should restrict its usage to
> > just the users chosen by an administrator to use virt-login-shell as
> > their login shell. This can easily be done by making the binary
> > executable only by users from a new virtlogin group.
> > 
> > Signed-off-by: Jiri Denemark <jdenemar at redhat.com>
> > ---
> >  libvirt.spec.in | 8 +++++++-
> >  1 file changed, 7 insertions(+), 1 deletion(-)
> > 
> ACK

Pushed, thanks.

Jirka




More information about the libvir-list mailing list