[Bug 765948] AUDIT-0: qemu and kvm setuid bridge helper setuid binary
https://bugzilla.novell.com/show_bug.cgi?id=765948 https://bugzilla.novell.com/show_bug.cgi?id=765948#c24 Sebastian Krahmer <krahmer@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |NEEDINFO InfoProvider| |brogers@suse.com --- Comment #24 from Sebastian Krahmer <krahmer@suse.com> 2014-07-16 09:55:02 UTC --- Bruce, If we apply this patch we can give the helper mode 04750 (for a qemu group if there is one? Or some other trusted user group). For the restrictive permission set I'd still like to keep the suid bit removed. I'll try to push this patch upstream, as it also fixes minor security hole. If you have good link to qemu upstream, you can also try yourself to get it included. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@novell.com