]> git.ipfire.org Git - thirdparty/libvirt.git/commitdiff
sanlock: Chown lease files as well
authorMichal Privoznik <mprivozn@redhat.com>
Fri, 21 Dec 2012 11:35:21 +0000 (12:35 +0100)
committerMichal Privoznik <mprivozn@redhat.com>
Fri, 28 Dec 2012 15:42:38 +0000 (16:42 +0100)
Since sanlock doesn't run under root:root, we have chown()'ed the
__LIBVIRT__DISKS__ lease file to the user:group defined in the
sanlock config. However, when writing the patch I've forgot about
lease files for each disk (this is the
/var/lib/libvirt/sanlock/<md5>) file.

src/locking/lock_driver_sanlock.c

index 75ced845c2612d1f254bb4307ae38464be972ac8..c955003072e78ea37658dc2041bd393fdfb80549 100644 (file)
@@ -679,6 +679,17 @@ static int virLockManagerSanlockCreateLease(struct sanlk_resource *res)
             }
             VIR_DEBUG("Someone else just created lockspace %s", res->disks[0].path);
         } else {
+            /* chown() the path to make sure sanlock can access it */
+            if ((driver->user != -1 || driver->group != -1) &&
+                (fchown(fd, driver->user, driver->group) < 0)) {
+                virReportSystemError(errno,
+                                     _("cannot chown '%s' to (%u, %u)"),
+                                     res->disks[0].path,
+                                     (unsigned int) driver->user,
+                                     (unsigned int) driver->group);
+                goto error_unlink;
+            }
+
             if ((rv = sanlock_align(&res->disks[0])) < 0) {
                 if (rv <= -200)
                     virReportError(VIR_ERR_INTERNAL_ERROR,