Re: virDomainCoreDumpWithFormat files created as root

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 28.05.2015 09:29, NoxDaFox wrote:
> Greetings,
> 
> I am dumping a guest VM memory for inspection using the command
> "virDomainCoreDumpWithFormat" and the created files appear to belong to
> root (both user and group).
> 
> I have searched around but didn't find any answer. Is there a way to
> instruct QEMU to create those files under a different user?
> 

The coredump should belong to the user:group that the domain in question
is running under. If (by default) your qemu processes run under
root:root so will the coredump.

Although, I'm wondering if we should not disregard this and make
coredump be always owned by root:root since a coredump may contain
sensitive info, e.g. all kinds of cipher keys. We do that with disk
images, so maybe we should reconsider our politics with coredumps.

Michal

_______________________________________________
libvirt-users mailing list
libvirt-users@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/libvirt-users




[Index of Archives]     [Virt Tools]     [Lib OS Info]     [Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [KDE Users]

  Powered by Linux