]> git.ipfire.org Git - thirdparty/libvirt.git/commit
projects / thirdparty / libvirt.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: a50e6f6) | patch
security_selinux: Set and restore /dev/sgx_* labels
authorMichal Privoznik <mprivozn@redhat.com>
Tue, 3 Jan 2023 09:29:01 +0000 (10:29 +0100)
committerMichal Privoznik <mprivozn@redhat.com>
Fri, 13 Jan 2023 07:41:51 +0000 (08:41 +0100)
commited6b8a30b90807d5a4d6bc0a5d0ec99fd5f040ff
tree70871a03203350759fee7305f39bd213617691a2tree | snapshot
parenta50e6f649b49ee89e25a4afba4ad8d537014e33fcommit | diff
security_selinux: Set and restore /dev/sgx_* labels

For SGX type of memory, QEMU needs to open and talk to
/dev/sgx_vepc and /dev/sgx_provision files. But we do not set nor
restore SELinux labels on these files when starting a guest.

Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
src/security/security_dac.c diff | blob | blame | history
src/security/security_manager.h diff | blob | blame | history
src/security/security_selinux.c diff | blob | blame | history
Mirror of https://github.com/libvirt/libvirt.git