]> git.ipfire.org Git - thirdparty/libvirt.git/commit
security: Allow RW access to pstore device
authorMichal Privoznik <mprivozn@redhat.com>
Tue, 30 Jul 2024 15:36:40 +0000 (17:36 +0200)
committerAndrea Bolognani <abologna@redhat.com>
Wed, 31 Jul 2024 12:15:59 +0000 (14:15 +0200)
commitac0b669c562574b3b5c94ce6f922819bb0a21bf1
treec1a56010390ae1d556e6c2c042b4cb96ae7e5c46
parentd913f204e005893f2a9f853e8931b5f5a5a2f143
security: Allow RW access to pstore device

The whole point of pstore device is that the guest writes crash
dumps into it. But the way SELinux label is set on the
corresponding file warrants RO access only. This is due to a
copy-paste from code around: kernel/initrd/DTB/SLIC - these are
RO indeed, but pstore MUST be writable too. In a sense it's
closer to NVRAM/disks - hence set imagelabel on it.

Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
Reviewed-by: Andrea Bolognani <abologna@redhat.com>
src/security/security_selinux.c