Michal Privoznik ea903036fa security: Try harder to run transactions ... When a QEMU process dies in the middle of a hotplug, then we fail to restore the seclabels on the device. The problem is that if the thread doing hotplug locks the domain object first and thus blocks the thread that wants to do qemuProcessStop(), the seclabel cleanup code will see vm->pid still set and mount namespace used and therefore try to enter the namespace represented by the PID. But the PID is gone really and thus entering will fail and no restore is done. What we can do is to try enter the namespace (if requested to do so) but if entering fails, fall back to no NS mode. Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1814481 Signed-off-by: Michal Privoznik <mprivozn@redhat.com> Reviewed-by: Pavel Mores <pmores@redhat.com>		2020-03-20 16:43:13 +01:00
..
apparmor	apparmor: allow to call vhost-user-gpu	2020-02-24 14:53:18 +01:00
Makefile.inc.am	virhostdev: move to src/hypervisor	2020-02-24 16:47:21 +01:00
security_apparmor.c	Add a space before ending a comment	2020-01-30 12:32:03 +01:00
security_apparmor.h
security_dac.c	security: Try harder to run transactions	2020-03-20 16:43:13 +01:00
security_dac.h
security_driver.c
security_driver.h
security_manager.c	Use g_strerror instead of virStrerror	2020-03-13 17:26:55 +01:00
security_manager.h	security: Introduce VIR_SECURITY_DOMAIN_IMAGE_PARENT_CHAIN_TOP flag	2020-03-09 14:14:37 +01:00
security_nop.c
security_nop.h
security_selinux.c	security: Try harder to run transactions	2020-03-20 16:43:13 +01:00
security_selinux.h
security_stack.c
security_stack.h
security_util.c
security_util.h
virt-aa-helper.c	aa-helper: use g_autofree in create_profile	2020-03-05 18:06:21 +01:00