[libvirt] /var/lib/libvirt/qemu permissions are wrong

Richard W.M. Jones rjones at redhat.com
Fri Jan 10 10:13:38 UTC 2014


On Fri, Jan 10, 2014 at 08:11:32AM -0200, Marcelo Cerri wrote:
> Thanks Richard,
> 
> I agree with you. Do you have any suggestion how this should be
> implemented? My first impression is that the virSecurityManager*
> internal API should be extended to support that.
> 
> The current code in qemu_process.c already uses
> virSecurityManagerSetDaemonSocketLabel() and
> virSecurityManagerClearSocketLabel() to set the correct SELinux context.
> However they can't be used to add similar functionality to DAC driver.

I've not looked at this code for ages, so you're in a better
position to judge this.

Rich.

-- 
Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones
libguestfs lets you edit virtual machines.  Supports shell scripting,
bindings from many languages.  http://libguestfs.org




More information about the libvir-list mailing list