Re: [libvirt] [PATCH] virt-aa-helper: disallow VNC socket read permissions

2016-04-20 Thread Cole Robinson
On 04/13/2016 08:15 PM, Cole Robinson wrote: > On 04/11/2016 03:06 AM, Cedric Bosdonnat wrote: >> On Fri, 2016-04-08 at 18:55 +0200, Guido Günther wrote: >>> On Fri, Apr 08, 2016 at 09:01:33AM -0400, Cole Robinson wrote: From: Simon Arlott The VM does not need read permission for it

Re: [libvirt] [PATCH] virt-aa-helper: disallow VNC socket read permissions

2016-04-13 Thread Cole Robinson
On 04/11/2016 03:06 AM, Cedric Bosdonnat wrote: > On Fri, 2016-04-08 at 18:55 +0200, Guido Günther wrote: >> On Fri, Apr 08, 2016 at 09:01:33AM -0400, Cole Robinson wrote: >>> From: Simon Arlott >>> >>> The VM does not need read permission for its own VNC socket to >>> create(), >>> bind(), accept

Re: [libvirt] [PATCH] virt-aa-helper: disallow VNC socket read permissions

2016-04-11 Thread Cedric Bosdonnat
On Fri, 2016-04-08 at 18:55 +0200, Guido Günther wrote: > On Fri, Apr 08, 2016 at 09:01:33AM -0400, Cole Robinson wrote: > > From: Simon Arlott > > > > The VM does not need read permission for its own VNC socket to > > create(), > > bind(), accept() connections or to receive(), send(), etc. on >

Re: [libvirt] [PATCH] virt-aa-helper: disallow VNC socket read permissions

2016-04-08 Thread Guido Günther
On Fri, Apr 08, 2016 at 09:01:33AM -0400, Cole Robinson wrote: > From: Simon Arlott > > The VM does not need read permission for its own VNC socket to create(), > bind(), accept() connections or to receive(), send(), etc. on connections. > > https://bugzilla.redhat.com/show_bug.cgi?id=1312573 >

[libvirt] [PATCH] virt-aa-helper: disallow VNC socket read permissions

2016-04-08 Thread Cole Robinson
From: Simon Arlott The VM does not need read permission for its own VNC socket to create(), bind(), accept() connections or to receive(), send(), etc. on connections. https://bugzilla.redhat.com/show_bug.cgi?id=1312573 --- src/security/virt-aa-helper.c | 2 +- 1 file changed, 1 insertion(+), 1