[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [RFC 0/1] tools/virtiofsd: don't create temporary directory in /
|
From: |
Jens Freimann |
|
Subject: |
Re: [RFC 0/1] tools/virtiofsd: don't create temporary directory in / |
|
Date: |
Mon, 5 Oct 2020 15:58:22 +0200 |
On Thu, Oct 01, 2020 at 08:15:18AM +0200, Jens Freimann wrote:
I'm sending this as an RFC because:
Maybe just prepending "/tmp" is not generic enough and we should make it
somehow configurable or use $TMPDIR. Also there might be security
implications I'm not aware of.
The process is running with container_kvm_t context which also needs
a change to be allowed to create files in tmpfs to make it work.
Fabiano had the idea to use a glib function to create the
temporary directory. It would be good because it uses the $TMPDIR env
variable.
But before we decide about glib or not: the change is in the call
chain of setup_sandbox() and there was a question what other implications
that has. What do you think?
regards,
Jens