External/libvirt
1
0
Fork 0
mirror of https://gitlab.com/libvirt/libvirt.git synced 2025-03-20 07:59:00 +00:00
Code

spec: Restrict virt-login-shell usage

Browse Source 
https://bugzilla.redhat.com/show_bug.cgi?id=1033614

As virt-login-shell is an SUID binary, we should restrict its usage to
just the users chosen by an administrator to use virt-login-shell as
their login shell. This can easily be done by making the binary
executable only by users from a new virtlogin group.
This commit is contained in:
Jiri Denemark 2013-11-22 12:13:03 +01:00
parent cc38d68dc1
commit 0ee2364319
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
libvirt.spec.in
View File

@ -1727,6 +1727,12 @@ if getent group sanlock > /dev/null ; then
fi
%endif
%if %{with_lxc}
%pre login-shell
getent group virtlogin >/dev/null || groupadd -r virtlogin
exit 0
%endif
%files
%defattr(-, root, root)
@ -2072,7 +2078,7 @@ fi
%if %{with_lxc}
%files login-shell
%attr(4755, root, root) %{_bindir}/virt-login-shell
%attr(4750, root, virtlogin) %{_bindir}/virt-login-shell
%config(noreplace) %{_sysconfdir}/libvirt/virt-login-shell.conf
%{_mandir}/man1/virt-login-shell.1*
%endif