External/libvirt
1
0
Fork 0
mirror of https://gitlab.com/libvirt/libvirt.git synced 2025-01-06 21:15:22 +00:00
Code Issues Packages Projects Releases Wiki Activity
3fcc90968c
libvirt/src/security
History
Jiri Denemark 3883ef0360 security: Skip labeling resources when seclabel defaults to none 
If a domain is explicitly configured with <seclabel type="none"/> we
correctly ensure that no labeling will be done by setting
norelabel=true. However, if no seclabel element is present in domain XML
and hypervisor is configured not to confine domains by default, we only
set type to "none" without turning off relabeling. Thus if such a domain
is being started, security driver wants to relabel resources with
default label, which doesn't make any sense.

Moreover, with SELinux security driver, the generated image label lacks
"s0" sensitivity, which causes setfilecon() fail with EINVAL in
enforcing mode.
(cherry picked from commit ce53382ba2)
2012-08-12 21:15:46 -04:00
..
security_apparmor.c apparmor: Mark pid parameter as unused 2012-01-11 12:27:47 +01:00
security_apparmor.h Refactor the security drivers to simplify usage 2011-01-10 18:10:52 +00:00
security_dac.c build: use correct type for pid and similar types 2012-03-02 06:57:43 -07:00
security_dac.h Refactor the security drivers to simplify usage 2011-01-10 18:10:52 +00:00
security_driver.c Refactor the security drivers to simplify usage 2011-01-10 18:10:52 +00:00
security_driver.h Change security driver APIs to use virDomainDefPtr instead of virDomainObjPtr 2012-01-11 09:52:18 +00:00
security_manager.c security: Skip labeling resources when seclabel defaults to none 2012-08-12 21:15:46 -04:00
security_manager.h Add two new security label types 2012-02-02 17:44:37 -07:00
security_nop.c Change security driver APIs to use virDomainDefPtr instead of virDomainObjPtr 2012-01-11 09:52:18 +00:00
security_nop.h Refactor the security drivers to simplify usage 2011-01-10 18:10:52 +00:00
security_selinux.c Cleanup for a return statement in source files 2012-03-26 14:45:22 -06:00
security_selinux.h Refactor the security drivers to simplify usage 2011-01-10 18:10:52 +00:00
security_stack.c Change security driver APIs to use virDomainDefPtr instead of virDomainObjPtr 2012-01-11 09:52:18 +00:00
security_stack.h Refactor the security drivers to simplify usage 2011-01-10 18:10:52 +00:00
virt-aa-helper.c Remove last usage of PATH_MAX and ban its future use 2012-06-14 18:22:52 -04:00