]> git.ipfire.org Git - thirdparty/libvirt.git/commit
qemu: process: SEV: Relabel guest owner's SEV files created before start
authorErik Skultety <eskultet@redhat.com>
Thu, 6 Dec 2018 13:59:15 +0000 (14:59 +0100)
committerErik Skultety <eskultet@redhat.com>
Wed, 2 Jan 2019 09:50:54 +0000 (10:50 +0100)
commit7dc31fe503e540d5b4ee4f94d61842aa6e302e94
treec06eb5f7209de82e66906407495410f772540a02
parent2c4c7de1595330a828015dd750b5ef3874f289d1
qemu: process: SEV: Relabel guest owner's SEV files created before start

Before launching a SEV guest we take the base64-encoded guest owner's
data specified in launchSecurity and create files with the same content
under /var/lib/libvirt/qemu/<domain>. The reason for this is that we
need to pass these files on to QEMU which then uses them to communicate
with the SEV firmware, except when it doesn't have permissions to open
those files since we don't relabel them.

https://bugzilla.redhat.com/show_bug.cgi?id=1658112

Signed-off-by: Erik Skultety <eskultet@redhat.com>
Acked-by: Michal Privoznik <mprivozn@redhat.com>
src/qemu/qemu_process.c