]> git.ipfire.org Git - thirdparty/libvirt.git/commit
virt-aa-helper: allow access to /usr/share/ovmf/
authorintrigeri <intrigeri@debian.org>
Fri, 21 Aug 2015 08:52:52 +0000 (10:52 +0200)
committerCole Robinson <crobinso@redhat.com>
Tue, 22 Sep 2015 00:18:01 +0000 (20:18 -0400)
commit4f4812f8a4e4281770bf86d3c16adbe945a0c654
treef4e6e63141474d44b8d8e7065c896e006cf86552
parenta8eaab32e1787a1a6d1ca76ae6dfae8af924392f
virt-aa-helper: allow access to /usr/share/ovmf/

We forbid access to /usr/share/, but (at least on Debian-based systems)
the Open Virtual Machine Firmware files needed for booting UEFI virtual
machines in QEMU live in /usr/share/ovmf/. Therefore, we need to add
that directory to the list of read only paths.

A similar patch was suggested by Jamie Strandboge <jamie@canonical.com>
on https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1483071.

(cherry picked from commit 2f01cfdf05448513d150ff1914d3444161c531b9)
src/security/virt-aa-helper.c
tests/virt-aa-helper-test