libvirt/src
Michal Privoznik 7a9ca0fae9 security_dac: Lock metadata when running transaction
Lock all the paths we want to relabel to mutually exclude other
libvirt daemons.

The only hitch here is that directories can't be locked.
Therefore, when relabeling a directory do not lock it (this
happens only when setting up some domain private paths anyway,
e.g. huge pages directory).

Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
Reviewed-by: John Ferlan <jferlan@redhat.com>
2018-09-18 17:12:53 +02:00
..
access access: Fix nwfilter-binding ACL access API name generation 2018-08-24 08:04:14 -04:00
admin
bhyve src: remove blank first line in function body 2018-09-17 13:29:01 +02:00
conf src: remove blank first line in function body 2018-09-17 13:29:01 +02:00
cpu src: remove blank first line in function body 2018-09-17 13:29:01 +02:00
cpu_map cpu: split x86 map data into separate files 2018-08-28 12:08:21 +01:00
esx src: fix incorrect indentation in function body by checking first line 2018-09-17 13:29:00 +02:00
hyperv
interface
keycodemapdb@16e5b07876
libxl libxl: drop support for Xen < 4.6 2018-09-14 11:47:08 -06:00
locking lock_manager: Allow disabling configFile for virLockManagerPluginNew 2018-09-18 17:12:53 +02:00
logging
lxc security_manager: Load lock plugin on init 2018-09-18 17:12:53 +02:00
network src: remove blank first line in function body 2018-09-17 13:29:01 +02:00
node_device
nwfilter src: remove blank first line in function body 2018-09-17 13:29:01 +02:00
openvz
phyp src: remove blank first line in function body 2018-09-17 13:29:01 +02:00
qemu security_manager: Load lock plugin on init 2018-09-18 17:12:53 +02:00
remote
rpc
secret events: add NULL check in virObjectEventStateQueue 2018-06-12 07:28:18 +02:00
security security_dac: Lock metadata when running transaction 2018-09-18 17:12:53 +02:00
storage src: remove blank first line in function body 2018-09-17 13:29:01 +02:00
test src: remove blank first line in function body 2018-09-17 13:29:01 +02:00
uml src: Make virStr*cpy*() functions return an int 2018-07-23 14:27:30 +02:00
util virlockspace: Allow caller to specify start and length offset in virLockSpaceAcquireResource 2018-09-18 17:12:53 +02:00
vbox src: remove blank first line in function body 2018-09-17 13:29:01 +02:00
vmware
vmx
vz src: remove blank first line in function body 2018-09-17 13:29:01 +02:00
xenapi src: remove blank first line in function body 2018-09-17 13:29:01 +02:00
xenconfig src: remove blank first line in function body 2018-09-17 13:29:01 +02:00
admin_protocol-structs
check-aclperms.pl
check-aclrules.pl
check-driverimpls.pl
check-drivername.pl
check-symfile.pl
check-symsorting.pl
datatypes.c
datatypes.h nwfilter: export port binding concept in the public API 2018-06-26 11:22:07 +01:00
driver-hypervisor.h
driver-interface.h
driver-network.h
driver-nodedev.h
driver-nwfilter.h
driver-secret.h
driver-state.h
driver-storage.h
driver-stream.h
driver.c
driver.h
dtrace2systemtap.pl
internal.h
libvirt_admin_private.syms
libvirt_admin_public.syms
libvirt_atomic.syms
libvirt_driver_modules.syms
libvirt_esx.syms
libvirt_internal.h
libvirt_libssh2.syms
libvirt_libssh.syms
libvirt_linux.syms
libvirt_lxc.syms
libvirt_openvz.syms
libvirt_private.syms conf: Move more PCI functions out of device_conf 2018-09-17 09:23:04 +02:00
libvirt_probes.d
libvirt_public.syms nwfilter: export port binding concept in the public API 2018-06-26 11:22:07 +01:00
libvirt_qemu_probes.d
libvirt_qemu.syms
libvirt_remote.syms
libvirt_sasl.syms
libvirt_vmware.syms
libvirt_vmx.syms
libvirt_xenconfig.syms
libvirt-admin.c
libvirt-admin.conf
libvirt-domain-snapshot.c
libvirt-domain.c docs: Typo fix in virDomainGetJobStats 2018-09-05 14:34:33 -05:00
libvirt-host.c
libvirt-interface.c
libvirt-lxc.c
libvirt-lxc.pc.in
libvirt-network.c src: Unify virObject member name 2018-04-18 10:04:55 +02:00
libvirt-nodedev.c
libvirt-nwfilter.c nwfilter: Add extra verbiage for binding create/delete 2018-08-24 08:45:19 -04:00
libvirt-qemu.c
libvirt-qemu.pc.in
libvirt-secret.c
libvirt-storage.c src: storage: Provide a better explanation of virStoragePoolSetAutostart 2018-08-22 09:46:10 +02:00
libvirt-stream.c
libvirt.c
libvirt.conf
libvirt.pc.in
lock_protocol-structs
lxc_monitor_protocol-structs
lxc_protocol-structs
Makefile.am cpu: move the CPU map data files into a src/cpu_map directory 2018-08-28 12:08:21 +01:00
qemu_protocol-structs
README
remote_protocol-structs
virkeepaliveprotocol-structs
virnetprotocol-structs

       libvirt library code README
       ===========================

The directory provides the bulk of the libvirt codebase. Everything
except for the libvirtd daemon and client tools. The build uses a
large number of libtool convenience libraries - one for each child
directory, and then links them together for the final libvirt.so,
although some bits get linked directly to libvirtd daemon instead.

The files directly in this directory are supporting the public API
entry points & data structures.

There are two core shared modules to be aware of:

 * util/  - a collection of shared APIs that can be used by any
            code. This directory is always in the include path
            for all things built

 * conf/  - APIs for parsing / manipulating all the official XML
            files used by the public API. This directory is only
            in the include path for driver implementation modules

 * vmx/   - VMware VMX config handling (used by esx/ and vmware/)


Then there are the hypervisor implementations:

 * bhyve         - bhyve - The BSD Hypervisor
 * esx/          - VMware ESX and GSX support using vSphere API over SOAP
 * hyperv/       - Microsoft Hyper-V support using WinRM
 * lxc/          - Linux Native Containers
 * openvz/       - OpenVZ containers using cli tools
 * phyp/         - IBM Power Hypervisor using CLI tools over SSH
 * qemu/         - QEMU / KVM using qemu CLI/monitor
 * remote/       - Generic libvirt native RPC client
 * test/         - A "mock" driver for testing
 * uml/          - User Mode Linux
 * vbox/         - Virtual Box using native API
 * vmware/       - VMware Workstation and Player using the vmrun tool
 * xen/          - Xen using hypercalls, XenD SEXPR & XenStore
 * xenapi/       - Xen using libxenserver


Finally some secondary drivers that are shared for several HVs.
Currently these are used by LXC, OpenVZ, QEMU, UML and Xen drivers.
The ESX, Hyper-V, Power Hypervisor, Remote, Test & VirtualBox drivers all
implement the secondary drivers directly

 * cpu/          - CPU feature management
 * interface/    - Host network interface management
 * network/      - Virtual NAT networking
 * nwfilter/     - Network traffic filtering rules
 * node_device/  - Host device enumeration
 * secret/       - Secret management
 * security/     - Mandatory access control drivers
 * storage/      - Storage management drivers


Since both the hypervisor and secondary drivers can be built as
dlopen()able modules, it is *FORBIDDEN* to have build dependencies
between these directories. Drivers are only allowed to depend on
the public API, and the internal APIs in the util/ and conf/
directories