This is basically v2 of:
https://www.redhat.com/archives/libvir-list/2015-September/msg00295.html
with some changes:
- permissions for per-VM dirs are fixed as well
- permissions for the /var/lib/libvirt/qemu directory are fixed in
the install phase of Makefile.am in addition to the spec file
We could also fix the permissions in qemuStateInitialize, but I chose
to do it this way. Bear in mind, that both approaches have their pros
and cons, of course.
Martin Kletzander (2):
qemu: Do not allow others into per-VM subdirectories
qemu: Allow others to browse /var/lib/libvirt/qemu
libvirt.spec.in | 4 ++--
src/Makefile.am | 2 +-
src/qemu/qemu_process.c | 4 ++--
3 files changed, 5 insertions(+), 5 deletions(-)