opensource/podman
1
0
Fork 0
mirror of https://github.com/containers/podman.git synced 2025-06-03 20:33:20 +08:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #16841 from rhatdan/default

Browse Source 
Make qemu security model none
This commit is contained in:
OpenShift Merge Robot
2022-12-15 11:53:06 -05:00
committed by GitHub
parent 31e547e60f 866426a93d
commit 8f0b35eb3d
2 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
docs/source/markdown/podman-machine-init.1.md
View File

@ -97,8 +97,12 @@ options are:
The 9p security model [determines] https://wiki.qemu.org/Documentation/9psetup#Starting_the_Guest_directly The 9p security model [determines] https://wiki.qemu.org/Documentation/9psetup#Starting_the_Guest_directly
if and how the 9p filesystem translates some filesystem operations before if and how the 9p filesystem translates some filesystem operations before
actual storage on the host. The actual storage on the host.
default value of *mapped-xattr* specifies that 9p store symlinks and some file
In order to allow symlinks to work, on MacOS the default security model is
*none*.
The value of *mapped-xattr* specifies that 9p store symlinks and some file
attributes as extended attributes on the host. This is suitable when the host attributes as extended attributes on the host. This is suitable when the host
and the guest do not need to interoperate on the shared filesystem, but has and the guest do not need to interoperate on the shared filesystem, but has
caveats for actual shared access; notably, symlinks on the host are not usable caveats for actual shared access; notably, symlinks on the host are not usable

2
pkg/machine/qemu/machine.go
View File

@ -305,7 +305,7 @@ func (v *MachineVM) Init(opts machine.InitOptions) (bool, error) {
source := paths[0] source := paths[0]
target := source target := source
readonly := false readonly := false
securityModel := "mapped-xattr" securityModel := "none"
if len(paths) > 1 { if len(paths) > 1 {
target = paths[1] target = paths[1]
} }