Bug 1032981 - New virtlogin group for libvirt
Summary: New virtlogin group for libvirt
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Fedora
Classification: Fedora
Component: setup
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
medium
Target Milestone: ---
Assignee: Ondrej Vasik
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2013-11-21 10:47 UTC by Jiri Denemark
Modified: 2013-11-22 10:43 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2013-11-22 10:43:43 UTC
Type: Bug

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Description Jiri Denemark 2013-11-21 10:47:05 UTC 
Description of problem:

Libvirt now comes with a new SUID binary called virt-login-shell, which is used to connect a user to an LXC container when they log in. Since the binary is SUID, we would like it to be owned by a dedicated group so that it can only be used by users that have been chosen by an administrator to use virt-login-shell as their shell. It's ownership and permissions would then look like the following:

-rwsr-x---  root    virtlogin   /usr/bin/virt-login-shell

Ideally, the new group would be called "virtlogin".

Version-Release number of selected component (if applicable):

libvirt-1.1.4
Comment 1 Ondrej Vasik 2013-11-22 10:43:43 UTC 
Discussed with Jirka, static allocation is not required here. He will keep the dynamic allocation. If required, this has to be handled via FPC ticket anyway ( https://fedoraproject.org/wiki/Packaging:UsersAndGroups#Soft_static_allocation ). Closing NOTABUG.
Note You need to log in before you can comment on or make changes to this bug.