libvirt/src/security
Eric Blake bfc183c1e3 security: fix deadlock with prefork
Attempts to start a domain with both SELinux and DAC security
modules loaded will deadlock; latent problem introduced in commit
fdb3bde and exposed in commit 29fe5d7.  Basically, when recursing
into the security manager for other driver's prefork, we have to
undo the asymmetric lock taken at the manager level.

Reported by Jiri Denemark, with diagnosis help from Dan Berrange.

* src/security/security_stack.c (virSecurityStackPreFork): Undo
extra lock grabbed during recursion.

Signed-off-by: Eric Blake <eblake@redhat.com>
2013-07-19 09:15:22 -06:00
..
security_apparmor.c Adapt to VIR_ALLOC and virAsprintf in src/security/* 2013-07-10 11:07:32 +02:00
security_apparmor.h maint: fix up copyright notice inconsistencies 2012-09-20 16:30:55 -06:00
security_dac.c security_dac: compute supplemental groups before fork 2013-07-18 15:35:30 -06:00
security_dac.h maint: fix up copyright notice inconsistencies 2012-09-20 16:30:55 -06:00
security_driver.c Convert 'int i' to 'size_t i' in src/security files 2013-07-10 17:40:14 +01:00
security_driver.h security: framework for driver PreFork handler 2013-07-18 15:19:36 -06:00
security_manager.c security: framework for driver PreFork handler 2013-07-18 15:19:36 -06:00
security_manager.h security: framework for driver PreFork handler 2013-07-18 15:19:36 -06:00
security_nop.c Adapt to VIR_STRDUP and VIR_STRNDUP in src/security/* 2013-05-23 09:56:38 +02:00
security_nop.h maint: fix up copyright notice inconsistencies 2012-09-20 16:30:55 -06:00
security_selinux.c Convert 'int i' to 'size_t i' in src/security files 2013-07-10 17:40:14 +01:00
security_selinux.h maint: fix up copyright notice inconsistencies 2012-09-20 16:30:55 -06:00
security_stack.c security: fix deadlock with prefork 2013-07-19 09:15:22 -06:00
security_stack.h security: fix #endif comment in security_stack.h 2012-12-20 19:55:54 +01:00
virt-aa-helper.c Convert 'int i' to 'size_t i' in src/security files 2013-07-10 17:40:14 +01:00