libvirt/src
Michal Privoznik ac0b669c56 security: Allow RW access to pstore device
The whole point of pstore device is that the guest writes crash
dumps into it. But the way SELinux label is set on the
corresponding file warrants RO access only. This is due to a
copy-paste from code around: kernel/initrd/DTB/SLIC - these are
RO indeed, but pstore MUST be writable too. In a sense it's
closer to NVRAM/disks - hence set imagelabel on it.

Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
Reviewed-by: Andrea Bolognani <abologna@redhat.com>
2024-07-31 14:15:59 +02:00
..
access api: add virNodeDeviceUpdate() 2024-02-26 11:03:51 +01:00
admin meson: drop explicit python interpreter 2024-01-22 09:14:29 +00:00
bhyve src: Fix return types of .stateInitialize callbacks 2024-05-22 13:41:42 +02:00
ch conf: Introduce pstore device 2024-07-25 16:04:50 +02:00
conf qemu: Autofill pstore path if missing 2024-07-30 17:22:00 +02:00
cpu qemu: Fix migration with disabled vmx-* CPU features 2024-06-25 09:41:16 +02:00
cpu_map cpu_map: Add pauth Arm CPU feature 2024-07-15 13:08:11 +02:00
esx esx: Move error messages onto a single line 2023-09-04 09:35:36 +02:00
hyperv conf: Introduce pstore device 2024-07-25 16:04:50 +02:00
hypervisor domain_interface: Fix build on FreeBSD 2024-04-15 08:51:23 +02:00
interface interface: fix udev reference leak with invalid flags 2024-06-05 12:19:12 +01:00
libxl conf: Introduce pstore device 2024-07-25 16:04:50 +02:00
locking meson: drop explicit python interpreter 2024-01-22 09:14:29 +00:00
logging log_cleaner: Detect rotated filenames properly 2024-05-31 08:34:29 +02:00
lxc conf: Introduce pstore device 2024-07-25 16:04:50 +02:00
network network: allow for forward dev to be a transient interface 2024-06-21 06:52:57 -04:00
node_device nodedev: add ccw device state and remove fencing 2024-06-20 09:38:46 +02:00
nwfilter util/network: new virFirewallBackend enum 2024-05-22 23:19:18 -04:00
openvz openvz_driver: use g_autofree instead of VIR_FREE() 2024-03-19 13:31:25 +01:00
qemu qemu: Pre-create pstore device file 2024-07-31 14:15:48 +02:00
remote remote_daemon_dispatch: Unref sasl session when closing client connection 2024-06-27 17:02:51 +02:00
rpc rpc: split TLS cert validation into separate file 2024-06-11 12:50:23 +01:00
secret src: Fix return types of .stateInitialize callbacks 2024-05-22 13:41:42 +02:00
security security: Allow RW access to pstore device 2024-07-31 14:15:59 +02:00
storage src: Fix return types of .stateInitialize callbacks 2024-05-22 13:41:42 +02:00
storage_file storage_file_probe: Treat qcow2 images with protocol drivers in backing store field as raw 2023-11-27 10:12:34 +01:00
test conf: Introduce pstore device 2024-07-25 16:04:50 +02:00
util virsysinfo: Calculate OEM string index better 2024-07-25 16:51:17 +02:00
vbox vbox: Drop needless g_new0(..., 0) in vbox_snapshot_conf.c 2024-04-13 23:16:54 +02:00
vmware capabilities: Allow suppressing error message from virCapabilitiesDomainSupported() 2024-03-12 17:39:21 +01:00
vmx vmx: Be even more lax when trying to comprehend serial ports 2024-07-16 12:41:37 +02:00
vz src: Fix return types of .stateInitialize callbacks 2024-05-22 13:41:42 +02:00
admin_protocol-structs
datatypes.c
datatypes.h datatypes: Declare g_autoptr cleanup functions for more public objects 2024-05-07 13:03:19 +02:00
driver-hypervisor.h libvirt: Introduce virDomainGraphicsReload API 2024-03-08 17:00:15 +01:00
driver-interface.h
driver-network.h Adding Public Get and Set APIs for Network Metadata 2023-08-25 12:36:37 +02:00
driver-nodedev.h api: add virNodeDeviceUpdate() 2024-02-26 11:03:51 +01:00
driver-nwfilter.h
driver-secret.h
driver-state.h
driver-storage.h
driver-stream.h
driver.c Use 'virTypedParamListFetch' for extracting identity parameters list 2023-05-02 14:32:46 +02:00
driver.h
internal.h src: reject empty string for 'dname' in migrate APIs 2023-11-21 17:35:56 +00:00
libvirt_driver_modules.syms
libvirt_esx.syms
libvirt_internal.h
libvirt_libssh2.syms
libvirt_libssh.syms
libvirt_linux.syms conf: Report CPU clusters in capabilities XML 2024-01-15 14:56:35 +01:00
libvirt_logging.syms
libvirt_lxc.syms
libvirt_openvz.syms
libvirt_private.syms conf: Introduce pstore device 2024-07-25 16:04:50 +02:00
libvirt_probes.d
libvirt_public.syms libvirt: Introduce virDomainGraphicsReload API 2024-03-08 17:00:15 +01:00
libvirt_qemu.syms
libvirt_remote.syms
libvirt_sasl.syms
libvirt_socket.syms
libvirt_vmware.syms
libvirt_vmx.syms
libvirt-domain-checkpoint.c
libvirt-domain-snapshot.c
libvirt-domain.c docs: Update doc for virDomainSave and virDomainRestore 2024-03-20 14:05:38 +01:00
libvirt-host.c
libvirt-interface.c
libvirt-lxc.c virprocess: virProcessGetNamespaces() to void 2024-01-04 17:06:14 +01:00
libvirt-lxc.pc.in
libvirt-network.c network: ensure nparams is non-NULL and non-negative 2024-04-17 13:13:02 +01:00
libvirt-nodedev.c nodedev: allow modify on define of a persistent node device 2024-02-26 11:15:27 +01:00
libvirt-nwfilter.c
libvirt-qemu.c
libvirt-qemu.pc.in
libvirt-secret.c
libvirt-storage.c
libvirt-stream.c
libvirt.c src: Detect close_range syscall during virGlobalInit() 2023-08-24 12:45:17 +02:00
libvirt.conf
libvirt.pc.in
lock_protocol-structs
lxc_monitor_protocol-structs
lxc_protocol-structs
meson.build meson: allow systemd unitdir to be changed 2024-06-07 14:04:19 +01:00
qemu_protocol-structs
README
remote_protocol-structs remote: implement virDomainGraphicsReload 2024-03-08 17:00:15 +01:00
virkeepaliveprotocol-structs
virnetprotocol-structs
virtd-admin.socket.in systemd: Improve and unify unit descriptions 2023-10-02 10:41:07 +02:00
virtd-ro.socket.in systemd: Improve and unify unit descriptions 2023-10-02 10:41:07 +02:00
virtd-tcp.socket.in systemd: Improve and unify unit descriptions 2023-10-02 10:41:07 +02:00
virtd-tls.socket.in systemd: Improve and unify unit descriptions 2023-10-02 10:41:07 +02:00
virtd.service.in systemd: Move Documentation lines 2023-10-02 10:41:07 +02:00
virtd.service.limitmemlock.extra.in systemd: Introduce systemd_service_limitmemlock_extra_in 2023-10-25 12:19:26 +02:00
virtd.service.limitnofile.extra.in systemd: Introduce systemd_service_limitnofile_extra_in 2023-10-25 12:19:21 +02:00
virtd.service.oomscoreadjust.extra.in systemd: Introduce systemd_service_oomscoreadjust_extra_in 2023-10-25 12:19:28 +02:00
virtd.service.tasksmax.extra.in systemd: Introduce systemd_service_tasksmax_extra_in 2023-10-25 12:19:24 +02:00
virtd.socket.in systemd: Improve and unify unit descriptions 2023-10-02 10:41:07 +02:00

       libvirt library code README
       ===========================

The directory provides the bulk of the libvirt codebase. Everything
except for the libvirtd daemon and client tools. The build uses a
large number of libtool convenience libraries - one for each child
directory, and then links them together for the final libvirt.so,
although some bits get linked directly to libvirtd daemon instead.

The files directly in this directory are supporting the public API
entry points & data structures.

There are two core shared modules to be aware of:

 * util/  - a collection of shared APIs that can be used by any
            code. This directory is always in the include path
            for all things built

 * conf/  - APIs for parsing / manipulating all the official XML
            files used by the public API. This directory is only
            in the include path for driver implementation modules

 * vmx/   - VMware VMX config handling (used by esx/ and vmware/)


Then there are the hypervisor implementations:

 * bhyve         - bhyve - The BSD Hypervisor
 * esx/          - VMware ESX and GSX support using vSphere API over SOAP
 * hyperv/       - Microsoft Hyper-V support using WinRM
 * lxc/          - Linux Native Containers
 * openvz/       - OpenVZ containers using cli tools
 * qemu/         - QEMU / KVM using qemu CLI/monitor
 * remote/       - Generic libvirt native RPC client
 * test/         - A "mock" driver for testing
 * vbox/         - Virtual Box using native API
 * vmware/       - VMware Workstation and Player using the vmrun tool
 * xen/          - Xen using hypercalls, XenD SEXPR & XenStore


Finally some secondary drivers that are shared for several HVs.
Currently these are used by LXC, OpenVZ, QEMU and Xen drivers.
The ESX, Hyper-V, Remote, Test & VirtualBox drivers all
implement the secondary drivers directly

 * cpu/          - CPU feature management
 * interface/    - Host network interface management
 * network/      - Virtual NAT networking
 * nwfilter/     - Network traffic filtering rules
 * node_device/  - Host device enumeration
 * secret/       - Secret management
 * security/     - Mandatory access control drivers
 * storage/      - Storage management drivers


Since both the hypervisor and secondary drivers can be built as
dlopen()able modules, it is *FORBIDDEN* to have build dependencies
between these directories. Drivers are only allowed to depend on
the public API, and the internal APIs in the util/ and conf/
directories