]> git.ipfire.org Git - thirdparty/libvirt.git/commit
virt-aa-helper: allow access to /usr/share/ovmf/
authorintrigeri <intrigeri@debian.org>
Fri, 21 Aug 2015 08:52:52 +0000 (10:52 +0200)
committerGuido Günther <agx@sigxcpu.org>
Mon, 24 Aug 2015 11:00:39 +0000 (13:00 +0200)
commit2f01cfdf05448513d150ff1914d3444161c531b9
tree61a361571fd0d1d3650b8175a9f6af3a410049a8
parentd25a5e087ae10142d3d533ed193146736526b2ae
virt-aa-helper: allow access to /usr/share/ovmf/

We forbid access to /usr/share/, but (at least on Debian-based systems)
the Open Virtual Machine Firmware files needed for booting UEFI virtual
machines in QEMU live in /usr/share/ovmf/. Therefore, we need to add
that directory to the list of read only paths.

A similar patch was suggested by Jamie Strandboge <jamie@canonical.com>
on https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1483071.
src/security/virt-aa-helper.c
tests/virt-aa-helper-test