From: Michal Privoznik Date: Fri, 12 Sep 2014 07:01:46 +0000 (+0200) Subject: libvirt.spec: Fix permission even for libvirt-driver-qemu X-Git-Tag: CVE-2014-3633~78 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=3c07693aa2e66705cd44767e6e4dcbd2998639f3;p=thirdparty%2Flibvirt.git libvirt.spec: Fix permission even for libvirt-driver-qemu In my previous patch (37d8c75fad) I've tried to fix permissions for nvram store path. The aim was to give the nvram directory execute permission so that domain running under other users than qemu:qemu can access their nvram file. However, my fix was incomplete as the path belongs to libvirt-driver-qemu package too and I've fixed it only for the libvirt-daemon package. Reported-by: Laszlo Ersek Signed-off-by: Michal Privoznik --- diff --git a/libvirt.spec.in b/libvirt.spec.in index ecf160b8e6..37a9ea48cb 100644 --- a/libvirt.spec.in +++ b/libvirt.spec.in @@ -2041,7 +2041,7 @@ exit 0 %dir %attr(0750, %{qemu_user}, %{qemu_group}) %{_localstatedir}/lib/libvirt/qemu/ %dir %attr(0750, %{qemu_user}, %{qemu_group}) %{_localstatedir}/lib/libvirt/qemu/channel/ %dir %attr(0750, %{qemu_user}, %{qemu_group}) %{_localstatedir}/lib/libvirt/qemu/channel/target/ -%dir %attr(0750, %{qemu_user}, %{qemu_group}) %{_localstatedir}/lib/libvirt/qemu/nvram/ +%dir %attr(0711, %{qemu_user}, %{qemu_group}) %{_localstatedir}/lib/libvirt/qemu/nvram/ %dir %attr(0750, %{qemu_user}, %{qemu_group}) %{_localstatedir}/cache/libvirt/qemu/ %{_datadir}/augeas/lenses/libvirtd_qemu.aug %{_datadir}/augeas/lenses/tests/test_libvirtd_qemu.aug