]> git.ipfire.org Git - thirdparty/libvirt.git/commit
secdrivers: Relabel firmware config files
authorMichal Privoznik <mprivozn@redhat.com>
Tue, 2 Jun 2020 18:56:09 +0000 (20:56 +0200)
committerMichal Privoznik <mprivozn@redhat.com>
Wed, 10 Jun 2020 12:00:38 +0000 (14:00 +0200)
commitd024a7da7a6dfa8830d0caebaf53a9164f177d9f
tree40ae8bda04a6c6cf2a5d1951d9383a9bd9501965
parent9ce32b0935360f98f00c8bd1ddacadfbf15ad33f
secdrivers: Relabel firmware config files

For the case where -fw_cfg uses a file, we need to set the
seclabels on it to allow QEMU the access. While QEMU allows
writing into the file (if specified on the command line), so far
we are enabling reading only and thus we can use read only label
(in case of SELinux).

Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
src/security/security_dac.c
src/security/security_selinux.c
src/security/virt-aa-helper.c