]> git.ipfire.org Git - thirdparty/libvirt.git/commit
security: Don't remember labels for TPM
authorMichal Privoznik <mprivozn@redhat.com>
Tue, 1 Oct 2019 08:32:26 +0000 (10:32 +0200)
committerMichal Privoznik <mprivozn@redhat.com>
Fri, 11 Oct 2019 15:05:55 +0000 (17:05 +0200)
commit4e95cdcbb3ebf9c63e179b016dad95341ef9e33e
treeb91bd15fdff02dbfa6e14b4450d8bffe33641155
parent2b44cf8c327a4795c5d64b74dea2f7f8216e281d
security: Don't remember labels for TPM

https://bugzilla.redhat.com/show_bug.cgi?id=1755803

The /dev/tpmN file can be opened only once, as implemented in
drivers/char/tpm/tpm-dev.c:tpm_open() from the kernel's tree. Any
other attempt to open the file fails. And since we're opening the
file ourselves and passing the FD to qemu we will not succeed
opening the file again when locking it for seclabel remembering.

Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
Reviewed-by: Cole Robinson <crobinso@redhat.com>
src/security/security_dac.c
src/security/security_selinux.c