Jiri Denemark ce53382ba2 security: Skip labeling resources when seclabel defaults to none ... If a domain is explicitly configured with <seclabel type="none"/> we correctly ensure that no labeling will be done by setting norelabel=true. However, if no seclabel element is present in domain XML and hypervisor is configured not to confine domains by default, we only set type to "none" without turning off relabeling. Thus if such a domain is being started, security driver wants to relabel resources with default label, which doesn't make any sense. Moreover, with SELinux security driver, the generated image label lacks "s0" sensitivity, which causes setfilecon() fail with EINVAL in enforcing mode.		2012-07-27 18:58:48 +02:00
..
security_apparmor.c	Desert the FSF address in copyright	2012-07-23 10:50:50 +08:00
security_apparmor.h	Desert the FSF address in copyright	2012-07-23 10:50:50 +08:00
security_dac.c	Desert the FSF address in copyright	2012-07-23 10:50:50 +08:00
security_dac.h	Desert the FSF address in copyright	2012-07-23 10:50:50 +08:00
security_driver.c	Desert the FSF address in copyright	2012-07-23 10:50:50 +08:00
security_driver.h	Desert the FSF address in copyright	2012-07-23 10:50:50 +08:00
security_manager.c	security: Skip labeling resources when seclabel defaults to none	2012-07-27 18:58:48 +02:00
security_manager.h	Desert the FSF address in copyright	2012-07-23 10:50:50 +08:00
security_nop.c	Desert the FSF address in copyright	2012-07-23 10:50:50 +08:00
security_nop.h	Desert the FSF address in copyright	2012-07-23 10:50:50 +08:00
security_selinux.c	Desert the FSF address in copyright	2012-07-23 10:50:50 +08:00
security_selinux.h	Desert the FSF address in copyright	2012-07-23 10:50:50 +08:00
security_stack.c	Desert the FSF address in copyright	2012-07-23 10:50:50 +08:00
security_stack.h	Desert the FSF address in copyright	2012-07-23 10:50:50 +08:00
virt-aa-helper.c	maint: Use consistent copyright.	2012-07-27 18:27:21 +08:00