[PATCH v2 6/8] secdrivers: Relabel firmware config files

[Daniel P. Berrangé]

On Thu, Jun 04, 2020 at 08:44:07PM +0200, Michal Privoznik wrote:
> For the case where -fw_cfg uses a file, we need to set the
> seclabels on it to allow QEMU the access. While QEMU allows
> writing into the file (if specified on the command line), so far
> we are enabling reading only and thus we can use read only label
> (in case of SELinux).
> 
> Signed-off-by: Michal Privoznik <mprivozn at redhat.com>
> ---
>  src/security/security_dac.c     | 50 +++++++++++++++++++++++++++++++++
>  src/security/security_selinux.c | 50 +++++++++++++++++++++++++++++++++
>  src/security/virt-aa-helper.c   | 12 ++++++++
>  3 files changed, 112 insertions(+)

Reviewed-by: Daniel P. Berrangé <berrange at redhat.com>


Regards,
Daniel
-- 
|: https://berrange.com      -o-    https://www.flickr.com/photos/dberrange :|
|: https://libvirt.org         -o-            https://fstop138.berrange.com :|
|: https://entangle-photo.org    -o-    https://www.instagram.com/dberrange :|