On Thu, May 24, 2018 at 04:26:00PM -0400, Stefan Berger wrote:
Extend the DAC and SELinux modules with support for the tpm-emulator.
We label the Unix socket that QEMU connects to after starting swtmp
with DAC and SELinux labels. We do not have to restore the labels in
this case since the tpm-emulator will remove the Unix socket when it
terminates.
Signed-off-by: Stefan Berger <stefanb(a)linux.vnet.ibm.com>
Reviewed-by: John Ferlan <jferlan(a)redhat.com>
---
src/security/security_dac.c | 5 +++++
src/security/security_selinux.c | 6 ++++++
2 files changed, 11 insertions(+)
Reviewed-by: Ján Tomko <jtomko(a)redhat.com>
Jano