2019-10-24 08:26:12 +00:00
|
|
|
# vim related ignores
|
|
|
|
*.swp
|
|
|
|
.lvimrc
|
|
|
|
|
|
|
|
# emacs related ignores
|
2010-02-23 00:01:34 +00:00
|
|
|
*#*#
|
|
|
|
*.#*#
|
2012-10-26 12:39:55 +00:00
|
|
|
.#*
|
2019-10-24 08:26:12 +00:00
|
|
|
|
|
|
|
# autotools related ignores
|
|
|
|
!/m4/virt-*.m4
|
|
|
|
*.cov
|
2012-10-12 23:50:19 +00:00
|
|
|
/AUTHORS
|
2010-11-16 19:29:09 +00:00
|
|
|
/INSTALL
|
|
|
|
/aclocal.m4
|
|
|
|
/autom4te.cache
|
2019-10-02 16:04:31 +00:00
|
|
|
/build-aux/.gitignore
|
|
|
|
/build-aux/compile
|
|
|
|
/build-aux/depcomp
|
|
|
|
/build-aux/missing
|
|
|
|
/build-aux/test-driver
|
2010-11-16 19:29:09 +00:00
|
|
|
/config.h.in
|
|
|
|
/config.log
|
|
|
|
/configure
|
2019-10-24 08:26:12 +00:00
|
|
|
/m4/*
|
|
|
|
Makefile.in
|
|
|
|
|
|
|
|
# gnulib related ignores
|
|
|
|
!/gnulib/lib/Makefile.am
|
|
|
|
!/gnulib/tests/Makefile.am
|
|
|
|
*.rej
|
|
|
|
*~
|
2011-07-28 12:55:21 +00:00
|
|
|
/gnulib/lib/*
|
|
|
|
/gnulib/m4/*
|
|
|
|
/gnulib/tests/*
|
2019-10-24 08:26:12 +00:00
|
|
|
|
|
|
|
# git related ignores
|
|
|
|
*.orig
|
|
|
|
.git-module-status
|
|
|
|
|
|
|
|
# libvirt related ignores
|
|
|
|
/build/
|
|
|
|
/ci/scratch/
|
2012-01-23 15:12:57 +00:00
|
|
|
/src/access/org.libvirt.api.policy
|
Auto-generate helpers for checking access control rules
Extend the 'gendispatch.pl' script to be able to generate
three new types of file.
- 'aclheader' - defines signatures of helper APIs for
doing authorization checks. There is one helper API
for each API requiring an auth check. Any @acl
annotations result in a method being generated with
a suffix of 'EnsureACL'. If the ACL check requires
examination of flags, an extra 'flags' param will be
present. Some examples
extern int virConnectBaselineCPUEnsureACL(void);
extern int virConnectDomainEventDeregisterEnsureACL(virDomainDefPtr domain);
extern int virDomainAttachDeviceFlagsEnsureACL(virDomainDefPtr domain, unsigned int flags);
Any @aclfilter annotations resuilt in a method being
generated with a suffix of 'CheckACL'.
extern int virConnectListAllDomainsCheckACL(virDomainDefPtr domain);
These are used for filtering individual objects from APIs
which return a list of objects
- 'aclbody' - defines the actual implementation of the
methods described above. This calls into the access
manager APIs. A complex example:
/* Returns: -1 on error (denied==error), 0 on allowed */
int virDomainAttachDeviceFlagsEnsureACL(virConnectPtr conn,
virDomainDefPtr domain,
unsigned int flags)
{
virAccessManagerPtr mgr;
int rv;
if (!(mgr = virAccessManagerGetDefault()))
return -1;
if ((rv = virAccessManagerCheckDomain(mgr,
conn->driver->name,
domain,
VIR_ACCESS_PERM_DOMAIN_WRITE)) <= 0) {
virObjectUnref(mgr);
if (rv == 0)
virReportError(VIR_ERR_ACCESS_DENIED, NULL);
return -1;
}
if (((flags & (VIR_DOMAIN_AFFECT_CONFIG|VIR_DOMAIN_AFFECT_LIVE)) == 0) &&
(rv = virAccessManagerCheckDomain(mgr,
conn->driver->name,
domain,
VIR_ACCESS_PERM_DOMAIN_SAVE)) <= 0) {
virObjectUnref(mgr);
if (rv == 0)
virReportError(VIR_ERR_ACCESS_DENIED, NULL);
return -1;
}
if (((flags & (VIR_DOMAIN_AFFECT_CONFIG)) == (VIR_DOMAIN_AFFECT_CONFIG)) &&
(rv = virAccessManagerCheckDomain(mgr,
conn->driver->name,
domain,
VIR_ACCESS_PERM_DOMAIN_SAVE)) <= 0) {
virObjectUnref(mgr);
if (rv == 0)
virReportError(VIR_ERR_ACCESS_DENIED, NULL);
return -1;
}
virObjectUnref(mgr);
return 0;
}
- 'aclsyms' - generates a linker script to export the
APIs to drivers. Some examples
virConnectBaselineCPUEnsureACL;
virConnectCompareCPUEnsureACL;
Signed-off-by: Daniel P. Berrange <berrange@redhat.com>
2013-04-18 16:49:41 +00:00
|
|
|
/src/access/viraccessapicheck.c
|
|
|
|
/src/access/viraccessapicheck.h
|
|
|
|
/src/access/viraccessapichecklxc.c
|
|
|
|
/src/access/viraccessapichecklxc.h
|
|
|
|
/src/access/viraccessapicheckqemu.c
|
|
|
|
/src/access/viraccessapicheckqemu.h
|
2015-04-16 12:23:16 +00:00
|
|
|
/src/admin/admin_client.h
|
2015-04-15 14:13:22 +00:00
|
|
|
/src/admin/admin_protocol.[ch]
|
2018-01-19 11:30:31 +00:00
|
|
|
/src/admin/admin_server_dispatch_stubs.h
|
2012-02-03 21:30:06 +00:00
|
|
|
/src/esx/*.generated.*
|
2011-07-13 15:05:19 +00:00
|
|
|
/src/hyperv/*.generated.*
|
2012-08-03 09:27:07 +00:00
|
|
|
/src/locking/lock_daemon_dispatch_stubs.h
|
2011-07-06 16:20:04 +00:00
|
|
|
/src/locking/lock_protocol.[ch]
|
2015-02-09 16:35:05 +00:00
|
|
|
/src/logging/log_daemon_dispatch_stubs.h
|
|
|
|
/src/logging/log_protocol.[ch]
|
2012-07-17 14:54:08 +00:00
|
|
|
/src/lxc/lxc_controller_dispatch.h
|
|
|
|
/src/lxc/lxc_monitor_dispatch.h
|
2012-12-21 13:19:54 +00:00
|
|
|
/src/lxc/lxc_monitor_protocol.c
|
|
|
|
/src/lxc/lxc_monitor_protocol.h
|
2011-05-06 13:11:32 +00:00
|
|
|
/src/remote/*_client_bodies.h
|
|
|
|
/src/remote/*_protocol.[ch]
|
2018-02-20 13:16:28 +00:00
|
|
|
/src/remote/*_stubs.h
|
2011-09-22 10:51:55 +00:00
|
|
|
/src/rpc/virkeepaliveprotocol.[ch]
|
2010-12-06 17:03:10 +00:00
|
|
|
/src/rpc/virnetprotocol.[ch]
|
2012-10-31 15:47:34 +00:00
|
|
|
tags
|