Fixed to abide domain seclabel model='dac' override

Signed-off-by: Cole Robinson <[email protected]>
---
 src/qemu/qemu_domain.c | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/src/qemu/qemu_domain.c b/src/qemu/qemu_domain.c
index d3daa0fe17..efbcdc6d2d 100644
--- a/src/qemu/qemu_domain.c
+++ b/src/qemu/qemu_domain.c
@@ -5832,10 +5832,13 @@ void qemuDomainObjCheckTaint(virQEMUDriver *driver,
     g_autoptr(virQEMUDriverConfig) cfg = virQEMUDriverGetConfig(driver);
     qemuDomainObjPrivate *priv = obj->privateData;
     bool custom_hypervisor_feat = false;
+    uid_t uid;
+    gid_t gid;
 
+    qemuDomainGetImageIds(cfg, obj->def, NULL, NULL, &uid, &gid);
     if (driver->privileged &&
-        (cfg->user == 0 ||
-         cfg->group == 0))
+        (uid == 0 ||
+         gid == 0))
         qemuDomainObjTaint(driver, obj, VIR_DOMAIN_TAINT_HIGH_PRIVILEGES, 
logCtxt);
 
     if (priv->hookRun)
-- 
2.53.0

Reply via email to