[libvirt] [PATCH 0/2] AMD SEV: Relabel session data under /var/lib/libvirt

Erik Skultety posted 2 patches 5 years, 3 months ago
Test syntax-check passed
Patches applied successfully (tree, apply log)
git fetch https://github.com/patchew-project/libvirt tags/patchew/cover.1544539092.git.eskultet@redhat.com
src/qemu/qemu_process.c | 13 +++++++++----
1 file changed, 9 insertions(+), 4 deletions(-)
[libvirt] [PATCH 0/2] AMD SEV: Relabel session data under /var/lib/libvirt
Posted by Erik Skultety 5 years, 3 months ago
If a user tries to pass the optional "dhCert" or "session" data to the SEV
firmware, these are in form of a base64-encoded strings which libvirt then
takes and creates files with those strings as content under
/var/lib/libvirt/qemu/<domain>. Libvirt then puts paths to these files on to
QEMU cmdline. QEMU then uses these files within its communication with SEV
firmware, provided it has access to those files.

https://bugzilla.redhat.com/show_bug.cgi?id=1658112

Erik Skultety (2):
  qemu: process: SEV: Assume libDir to be the directory to create files
    in
  qemu: process: SEV: Relabel guest owner's SEV files created before
    start

 src/qemu/qemu_process.c | 13 +++++++++----
 1 file changed, 9 insertions(+), 4 deletions(-)

--
2.19.2

--
libvir-list mailing list
libvir-list@redhat.com
https://www.redhat.com/mailman/listinfo/libvir-list
Re: [libvirt] [PATCH 0/2] AMD SEV: Relabel session data under /var/lib/libvirt
Posted by Michal Privoznik 5 years, 3 months ago
On 12/11/18 3:43 PM, Erik Skultety wrote:
> If a user tries to pass the optional "dhCert" or "session" data to the SEV
> firmware, these are in form of a base64-encoded strings which libvirt then
> takes and creates files with those strings as content under
> /var/lib/libvirt/qemu/<domain>. Libvirt then puts paths to these files on to
> QEMU cmdline. QEMU then uses these files within its communication with SEV
> firmware, provided it has access to those files.
> 
> https://bugzilla.redhat.com/show_bug.cgi?id=1658112
> 
> Erik Skultety (2):
>   qemu: process: SEV: Assume libDir to be the directory to create files
>     in
>   qemu: process: SEV: Relabel guest owner's SEV files created before
>     start
> 
>  src/qemu/qemu_process.c | 13 +++++++++----
>  1 file changed, 9 insertions(+), 4 deletions(-)
> 

ACK

Michal

--
libvir-list mailing list
libvir-list@redhat.com
https://www.redhat.com/mailman/listinfo/libvir-list