mirror of
https://gitlab.com/libvirt/libvirt.git
synced 2024-12-23 14:15:28 +00:00
4ebfc42716
Normally the dynamic labelling mode will always use a base
label of 'svirt_t' for VMs. Introduce a <baselabel> field
in the <seclabel> XML to allow this base label to be changed
eg
<seclabel type='dynamic' model='selinux'>
<baselabel>system_u:object_r:virt_t:s0</baselabel>
</seclabel>
* docs/schemas/domain.rng: Add <baselabel>
* src/conf/domain_conf.c, src/conf/domain_conf.h: Parsing
of base label
* src/qemu/qemu_process.c: Don't reset 'model' attribute if
a base label is specified
* src/security/security_apparmor.c: Refuse to support base label
* src/security/security_selinux.c: Use 'baselabel' when generating
label, if available
|
||
|---|---|---|
| .. | ||
| capability.rng | ||
| domain.rng | ||
| domainsnapshot.rng | ||
| interface.rng | ||
| Makefile.am | ||
| network.rng | ||
| nodedev.rng | ||
| nwfilter.rng | ||
| secret.rng | ||
| storageencryption.rng | ||
| storagepool.rng | ||
| storagevol.rng | ||