I think the most important fix is 2/6 as it might touch live user data. Also, I haven't run 'make check-access' in a while. If I did I would have noticed new paths being accessed. I'll try to update white list (in a separate patch set) and hopefully we can then enable by default and threat its errors as fatal. Michal Prívozník (6): qemuBuildSCSIiSCSIHostdevDrvStr: Don't leak @netsource and @srcprops qemuxml2argvtest: Don't spawn session daemon Forget last daemon/ dir artefacts virtestmock: Track connect() too check-file-access: Allow specifying action virtestmock: Track action Makefile.am | 2 +- run.in | 2 +- src/driver.h | 2 +- src/qemu/qemu_command.c | 6 ++--- tests/check-file-access.pl | 32 ++++++++++++++++++---- tests/file_access_whitelist.txt | 15 +++++++---- tests/libvirtd-fail | 4 +-- tests/qemuxml2argvmock.c | 7 +++++ tests/virtestmock.c | 59 ++++++++++++++++++++++++++++++----------- 9 files changed, 95 insertions(+), 34 deletions(-) -- 2.16.4 -- libvir-list mailing list libvir-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/libvir-list
