Re: [PATCH 1/3] selinux: Don't remember label for restore path

2020-04-17 Thread Erik Skultety
On Fri, Apr 03, 2020 at 05:58:01PM +0200, Michal Privoznik wrote: > The seclabel for @stdin_path in virSecuritySELinuxSetAllLabel() > is not restored, because at virSecuritySELinuxRestoreAllLabel() > phase it's too late and the caller (QEMU driver) simply doesn't > care. Well, don't remember the la

[PATCH 1/3] selinux: Don't remember label for restore path

2020-04-03 Thread Michal Privoznik
The seclabel for @stdin_path in virSecuritySELinuxSetAllLabel() is not restored, because at virSecuritySELinuxRestoreAllLabel() phase it's too late and the caller (QEMU driver) simply doesn't care. Well, don't remember the label and let the perms leak. Signed-off-by: Michal Privoznik --- src/sec