Re: [libvirt] [PATCH] spec: Restrict virt-login-shell usage
On Fri, Nov 22, 2013 at 14:00:06 +0000, Daniel Berrange wrote:
On Fri, Nov 22, 2013 at 02:57:36PM +0100, Jiri Denemark wrote:
> https://bugzilla.redhat.com/show_bug.cgi?id=1033614
>
> As virt-login-shell is an SUID binary, we should restrict its usage to
> just the users chosen by an administrator to use virt-login-shell as
> their login shell. This can easily be done by making the binary
> executable only by users from a new virtlogin group.
>
> Signed-off-by: Jiri Denemark <jdenemar(a)redhat.com>
> ---
> libvirt.spec.in | 8 +++++++-
> 1 file changed, 7 insertions(+), 1 deletion(-)
>
ACK
Pushed, thanks.
Jirka