Re: [Xen-users] Permission of /usr/libexec/libvirt_proxy

["Niels Dettenbach (Syndicat IT&Internet)" <nd@xxxxxxxxxxxx>]

shell heriyanto <shell.heriyanto@xxxxxxxxx> schrieb:
>I just do security harden on my server,
>can i change permission for file /usr/libexec/libvirt_proxy
>from -rwsr-xr-x to -rwxr-xr-x. Can this make problem with xen? what
>impact
>if i do this?

not shure what do you mean with "harden" in your case and
i'm not shure because i did not use libvirt_proxy usually, but i assume the set 
uid bit allows other users then root to access functions hardly bound to the 
root user within xen and os subsystem required by xen.

As long as only root is using xen on your sys this should not be a problem. If 
other users then root want access to xen/libvirt (i.e. within a "xen" or 
"wheel" group) this change could avoid the usability of xen for them.


cheers,


Niels.
-- 
Niels Dettenbach
Syndicat IT&Internet
http://www.syndicat.com


_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxx
http://lists.xen.org/xen-users