[libvirt PATCH 2/2] rpm: fix ownership of the swtpm log directory

Daniel P. Berrangé posted 2 patches 5 years, 1 month ago
[libvirt PATCH 2/2] rpm: fix ownership of the swtpm log directory
Posted by Daniel P. Berrangé 5 years, 1 month ago
As soon as a guest using a <tpm> device is launched, libvirt will change
the ownership to 'tss' user and group, which will cause RPM verify to
then fail.

Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
---
 libvirt.spec.in | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/libvirt.spec.in b/libvirt.spec.in
index 2e026b0423..c455aa7788 100644
--- a/libvirt.spec.in
+++ b/libvirt.spec.in
@@ -1747,7 +1747,7 @@ exit 0
 %{_datadir}/augeas/lenses/tests/test_libvirtd_qemu.aug
 %{_libdir}/%{name}/connection-driver/libvirt_driver_qemu.so
 %dir %attr(0711, root, root) %{_localstatedir}/lib/libvirt/swtpm/
-%dir %attr(0711, root, root) %{_localstatedir}/log/swtpm/libvirt/qemu/
+%dir %attr(0711, tss, tss) %{_localstatedir}/log/swtpm/libvirt/qemu/
 %{_bindir}/virt-qemu-run
 %{_mandir}/man1/virt-qemu-run.1*
 %endif
-- 
2.29.2

Re: [libvirt PATCH 2/2] rpm: fix ownership of the swtpm log directory
Posted by Daniel P. Berrangé 5 years, 1 month ago
On Mon, Jan 04, 2021 at 06:05:17PM +0000, Daniel P. Berrangé wrote:
> As soon as a guest using a <tpm> device is launched, libvirt will change
> the ownership to 'tss' user and group, which will cause RPM verify to
> then fail.
> 
> Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
> ---
>  libvirt.spec.in | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/libvirt.spec.in b/libvirt.spec.in
> index 2e026b0423..c455aa7788 100644
> --- a/libvirt.spec.in
> +++ b/libvirt.spec.in
> @@ -1747,7 +1747,7 @@ exit 0
>  %{_datadir}/augeas/lenses/tests/test_libvirtd_qemu.aug
>  %{_libdir}/%{name}/connection-driver/libvirt_driver_qemu.so
>  %dir %attr(0711, root, root) %{_localstatedir}/lib/libvirt/swtpm/
> -%dir %attr(0711, root, root) %{_localstatedir}/log/swtpm/libvirt/qemu/
> +%dir %attr(0711, tss, tss) %{_localstatedir}/log/swtpm/libvirt/qemu/

Mode should have been changed to 0730 too, since that is what the
code (strangely) uses right now.


Regards,
Daniel
-- 
|: https://berrange.com      -o-    https://www.flickr.com/photos/dberrange :|
|: https://libvirt.org         -o-            https://fstop138.berrange.com :|
|: https://entangle-photo.org    -o-    https://www.instagram.com/dberrange :|