Re: [libvirt] [PATCH v8 04/18] security: Add DAC and SELinux security for tpm-emulator

On Thu, May 24, 2018 at 04:26:00PM -0400, Stefan Berger wrote:

Extend the DAC and SELinux modules with support for the tpm-emulator. We label the Unix socket that QEMU connects to after starting swtmp with DAC and SELinux labels. We do not have to restore the labels in this case since the tpm-emulator will remove the Unix socket when it terminates.

Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com> Reviewed-by: John Ferlan <jferlan@redhat.com> --- src/security/security_dac.c | 5 +++++ src/security/security_selinux.c | 6 ++++++ 2 files changed, 11 insertions(+)

Reviewed-by: Ján Tomko <jtomko@redhat.com> Jano