libvirt/src/security
Daniel P. Berrange bc0010b3d1 Fix save and restore with non-privileged guests and SELinux
When running qemu:///system instance, libvirtd runs as root,
but QEMU may optionally be configured to run non-root. When
then saving a guest to a state file, the file is initially
created as root, and thus QEMU cannot write to it. It is also
missing labelling required to allow access via SELinux.

* src/qemu/qemu_driver.c: Set ownership on save image before
  running migrate command in virDomainSave impl. Call out to
  security driver to set save image labelling
* src/security/security_driver.h: Add driver APIs for setting
  and restoring saved state file labelling
* src/security/security_selinux.c: Implement saved state file
  labelling for SELinux
2009-11-11 15:24:32 +00:00
..
security_apparmor.c Add missing OOM error checks, reports and cleanups 2009-11-09 23:17:45 +01:00
security_apparmor.h sVirt AppArmor security driver 2009-10-08 16:34:22 +02:00
security_driver.c Various error reporting fixes 2009-11-03 16:46:54 -05:00
security_driver.h Fix save and restore with non-privileged guests and SELinux 2009-11-11 15:24:32 +00:00
security_selinux.c Fix save and restore with non-privileged guests and SELinux 2009-11-11 15:24:32 +00:00
security_selinux.h Move security drivers to src/security/ 2009-09-21 14:41:44 +01:00
virt-aa-helper.c sVirt AppArmor security driver 2009-10-08 16:34:22 +02:00