Re: [libvirt] [PATCH] libvirtd: Enable private /tmp under systemd.

2012-02-07 Thread Daniel P. Berrange
On Mon, Feb 06, 2012 at 02:31:55PM -0700, Eric Blake wrote: On 02/06/2012 02:15 PM, Eric Blake wrote: The last intentional use of /tmp by libvirt was patched in commit bd6083c9b; we can add an extra measure of security by explicitly requesting that libvirtd's /tmp is not visible to

[libvirt] [PATCH] libvirtd: Enable private /tmp under systemd.

2012-02-06 Thread Eric Blake
The last intentional use of /tmp by libvirt was patched in commit bd6083c9b; we can add an extra measure of security by explicitly requesting that libvirtd's /tmp is not visible to arbitrary users. See https://bugzilla.redhat.com/782474 * daemon/libvirtd.service.in (Service): Enable PrivateTmp.

Re: [libvirt] [PATCH] libvirtd: Enable private /tmp under systemd.

2012-02-06 Thread Eric Blake
On 02/06/2012 02:15 PM, Eric Blake wrote: The last intentional use of /tmp by libvirt was patched in commit bd6083c9b; we can add an extra measure of security by explicitly requesting that libvirtd's /tmp is not visible to arbitrary users. See https://bugzilla.redhat.com/782474 *