]> xenbits.xensource.com Git - libvirt.git/commitdiff
viraccessdriverpolkit: Add missing vtpm case
authorMichal Privoznik <mprivozn@redhat.com>
Fri, 9 Feb 2024 08:03:29 +0000 (09:03 +0100)
committerMichal Privoznik <mprivozn@redhat.com>
Tue, 13 Feb 2024 15:11:00 +0000 (16:11 +0100)
When adding vtpm virSecret usage type (in v5.6.0-rc1~61) we
forgot to update polkit access check. This limited user's ability
to match secrets in their rules. Add missing case into switch in
virAccessDriverPolkitCheckSecret().

Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
src/access/viraccessdriverpolkit.c

index c7ff81ee8666b60ce17200ffca20e8d3105ae5de..b78049583c83790c4e28fe5e891348ec7f715d15 100644 (file)
@@ -390,6 +390,19 @@ virAccessDriverPolkitCheckSecret(virAccessManager *manager,
                                          virAccessPermSecretTypeToString(perm),
                                          attrs);
     }   break;
+    case VIR_SECRET_USAGE_TYPE_VTPM: {
+        const char *attrs[] = {
+                    "connect_driver", driverName,
+                    "secret_uuid", uuidstr,
+                    "secret_usage_name", secret->usage_id,
+                    NULL,
+                };
+
+        return virAccessDriverPolkitCheck(manager,
+                                         "secret",
+                                         virAccessPermSecretTypeToString(perm),
+                                         attrs);
+    }   break;
     }
 }