Re: [PATCH] security: Use org namespace for xattrs on macOS
On Mon, Nov 02, 2020 at 06:12:34PM +0100, Andrea Bolognani wrote:
On Sun, 2020-11-01 at 14:38 +0300, Roman Bolshakov wrote:
> But I'm not sure if libvirt on macOS is going to
> be used from root, rather from a user account.
So, it's just qemu:///session on macOS?
Yes, that's what I had been using when I was running libvirt with HVF
patchset... and qemu+ssh:///session
What happens if you try to run libvirtd as root instead?
It can be started ($VAR_PREFIX/run has to be created before first run).
But I didn't use it like that earlier so I can't tell how it behaves.
It's great that apparently the scenario that most macOS users are
going to encounter works, but I'm still concerned that we might not
behave reasonably when qemu:///system is tried instead...
... and that skipping this test would just be papering over an actual
issue.
I hope Michal's changes address that concerns.
Thanks,
Roman