Re: libvirt, selinux, moving images to ~/images does not work

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 04/08/2013 01:14 AM, Alexey Kardashevskiy wrote:
> Hi!
> 
> Setting security_driver to "none" (instead of "selinux") fixed the
> problem so I presumed that selinux is the problem here. But you're right
> after all, this helped:
> 
> [root@vpl2 ~]# chmod 777 /home/aik/
> [root@vpl2 ~]# chmod 777 /home/aik/virtimg/

It may have helped, but it also opened you up to a security hole.  You
generally don't want permissions to be this wide open on your home
directory.  Rather, the use of ACLs or group (but not world) permissions
should be considered, so that access is granted to the qemu group but
not to the world.

-- 
Eric Blake   eblake redhat com    +1-919-301-3266
Libvirt virtualization library http://libvirt.org

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
libvirt-users mailing list
libvirt-users@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/libvirt-users

[Index of Archives]     [Virt Tools]     [Lib OS Info]     [Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [KDE Users]

  Powered by Linux