libvirt

mirror of https://gitlab.com/libvirt/libvirt.git synced 2025-01-22 20:45:18 +00:00

History

Daniel P. Berrange 4ebfc42716 Allow a base label to be specified in dynamic labelling mode

Normally the dynamic labelling mode will always use a base
label of 'svirt_t' for VMs. Introduce a <baselabel> field
in the <seclabel> XML to allow this base label to be changed

eg

   <seclabel type='dynamic' model='selinux'>
     <baselabel>system_u:object_r:virt_t:s0</baselabel>
   </seclabel>

* docs/schemas/domain.rng: Add <baselabel>
* src/conf/domain_conf.c, src/conf/domain_conf.h: Parsing
  of base label
* src/qemu/qemu_process.c: Don't reset 'model' attribute if
  a base label is specified
* src/security/security_apparmor.c: Refuse to support base label
* src/security/security_selinux.c: Use 'baselabel' when generating
  label, if available

2011-07-04 11:17:19 +01:00

capability.rng

cpu: Add support for CPU vendor

2010-07-07 17:26:00 +02:00

domain.rng

Allow a base label to be specified in dynamic labelling mode

2011-07-04 11:17:19 +01:00

domainsnapshot.rng

Domain snapshot RNG and tests.

2010-05-20 13:50:03 -04:00

interface.rng

interface.rng: Make miimon and arpmon optional for bond interfaces