Re: [PATCH 0/6] Introduce OpenSSH authorized key file mgmt APIs

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 11/12/20 1:16 PM, Vasiliy Tolstov wrote:
Useful things. As i understand it qemu-ga eventually can replace
cloud-init stuff. As for now it already have high level api and low
level api (like read/write files)

Yeah, the low level file manipulation APIs are terrible because they have to rely on SELinux to prevent qemu-ga from doing something bad. Which in this case would end up in either disabling SELinux (bad) or having to write custom policies so that qemu-ga can modify authorized_keys files.

And also, from mgmt application's POV they are not atomic.

Michal




[Index of Archives]     [Virt Tools]     [Libvirt Users]     [Lib OS Info]     [Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Big List of Linux Books]     [Yosemite News]     [KDE Users]     [Fedora Tools]

  Powered by Linux