Michal Privoznik 37d8c75fad nvram: Fix permissions ... I've noticed two problem with the automatically created NVRAM varstore file. The first, even though I run qemu as root:root for some reason I get Permission denied when trying to open the _VARS.fd file. The problem is, the upper directory misses execute permissions, which in combination with us dropping some capabilities result in EPERM. The next thing is, that if I switch SELinux to enforcing mode, I get another EPERM because the vars file is not labeled correctly. It is passed to qemu as disk and hence should be labelled as disk. QEMU may write to it eventually, so this is different to kernel or initrd. Signed-off-by: Michal Privoznik <mprivozn@redhat.com>		2014-09-11 16:16:27 +02:00
..
security_apparmor.c	hostdev: Introduce virDomainHostdevSubsysSCSIiSCSI	2014-07-24 07:04:44 -04:00
security_apparmor.h	maint: fix up copyright notice inconsistencies	2012-09-20 16:30:55 -06:00
security_dac.c	qemu: Implement extended loader and nvram	2014-09-10 09:38:07 +02:00
security_dac.h	security: DAC: Introduce callback to perform image chown	2014-07-24 09:58:59 +02:00
security_driver.c	Add virLogSource variables to all source files	2014-03-18 14:29:22 +00:00
security_driver.h	security: Introduce APIs to label single images	2014-07-09 10:38:56 +02:00
security_manager.c	security: DAC: Introduce callback to perform image chown	2014-07-24 09:58:59 +02:00
security_manager.h	security: DAC: Introduce callback to perform image chown	2014-07-24 09:58:59 +02:00
security_nop.c	security: Introduce APIs to label single images	2014-07-09 10:38:56 +02:00
security_nop.h	maint: fix up copyright notice inconsistencies	2012-09-20 16:30:55 -06:00
security_selinux.c	nvram: Fix permissions	2014-09-11 16:16:27 +02:00
security_selinux.h	maint: fix up copyright notice inconsistencies	2012-09-20 16:30:55 -06:00
security_stack.c	security: Introduce APIs to label single images	2014-07-09 10:38:56 +02:00
security_stack.h	security: fix #endif comment in security_stack.h	2012-12-20 19:55:54 +01:00
virt-aa-helper.c	conf: Extend <loader/> and introduce <nvram/>	2014-09-10 09:38:07 +02:00