libvirt/src/security
Jamie Strandboge b9757fea30 apparmor: implement AppArmorSetFDLabel()
During a savevm operation, libvirt will now use fd migration if qemu
supports it. When the AppArmor driver is enabled, AppArmorSetFDLabel()
is used but since this function simply returns '0', the dynamic AppArmor
profile is not updated and AppArmor blocks access to the save file. This
patch implements AppArmorSetFDLabel() to get the pathname of the file by
resolving the fd symlink in /proc, and then gives that pathname to
reload_profile(), which fixes 'virsh save' when AppArmor is enabled.

Reference: https://launchpad.net/bugs/795800
2011-06-20 11:53:24 +08:00
..
security_apparmor.c apparmor: implement AppArmorSetFDLabel() 2011-06-20 11:53:24 +08:00
security_apparmor.h Refactor the security drivers to simplify usage 2011-01-10 18:10:52 +00:00
security_dac.c security driver: ignore EINVAL when chowning an image file 2011-06-03 12:27:05 -04:00
security_dac.h Refactor the security drivers to simplify usage 2011-01-10 18:10:52 +00:00
security_driver.c Refactor the security drivers to simplify usage 2011-01-10 18:10:52 +00:00
security_driver.h Add a function to the security driver API that sets the label of an open fd. 2011-01-26 09:03:11 -05:00
security_manager.c security: plug regression introduced in disk probe logic 2011-06-01 17:05:24 -06:00
security_manager.h Remove virConnectPtr from virRaiseErrorFull 2011-04-17 07:22:23 +02:00
security_nop.c Add a function to the security driver API that sets the label of an open fd. 2011-01-26 09:03:11 -05:00
security_nop.h Refactor the security drivers to simplify usage 2011-01-10 18:10:52 +00:00
security_selinux.c Fix security driver handling of FIFOs with QEMU 2011-05-06 12:56:32 +01:00
security_selinux.h Refactor the security drivers to simplify usage 2011-01-10 18:10:52 +00:00
security_stack.c security: avoid memory leak 2011-02-22 09:50:34 -07:00
security_stack.h Refactor the security drivers to simplify usage 2011-01-10 18:10:52 +00:00
virt-aa-helper.c virt-aa-helper: add missing include 2011-06-08 07:19:21 -06:00