libvirt/src
Jamie Strandboge d0d4b8ad76 AppArmor handling of accesses to readonly files
Fixes https://launchpad.net/bugs/453335

* src/security/virt-aa-helper.c: suppress confusing and misleading
  apparmor denied message when kvm/qemu tries to open a libvirt specified
  readonly file (such as a cdrom) with write permissions. libvirt uses
  the readonly attribute for the security driver only, and has no way
  of telling kvm/qemu that the device should be opened readonly
2009-11-13 15:32:55 +01:00
..
conf Fix formatting of XML for an inactive guest 2009-11-13 11:50:08 +00:00
esx Add virConnectGetLibvirtVersion API 2009-11-12 10:53:26 -05:00
interface New APIs for checking some object properties 2009-11-10 17:00:26 +00:00
lxc Fix incorrect variable passed to LXC event callback 2009-11-13 11:50:14 +00:00
network Implmentation of new APIs to checking state/persistence of objects 2009-11-10 17:00:27 +00:00
node_device Fix race condition in HAL driver startup 2009-11-13 11:50:10 +00:00
opennebula Add virConnectGetLibvirtVersion API 2009-11-12 10:53:26 -05:00
openvz Add virConnectGetLibvirtVersion API 2009-11-12 10:53:26 -05:00
phyp Add virConnectGetLibvirtVersion API 2009-11-12 10:53:26 -05:00
qemu Add virConnectGetLibvirtVersion API 2009-11-12 10:53:26 -05:00
remote Add virConnectGetLibvirtVersion API 2009-11-12 10:53:26 -05:00
secret Add missing OOM error checks, reports and cleanups 2009-11-09 23:17:45 +01:00
security AppArmor handling of accesses to readonly files 2009-11-13 15:32:55 +01:00
storage Implmentation of new APIs to checking state/persistence of objects 2009-11-10 17:00:27 +00:00
test Add virConnectGetLibvirtVersion API 2009-11-12 10:53:26 -05:00
uml Add virConnectGetLibvirtVersion API 2009-11-12 10:53:26 -05:00
util Fix check for existance of cgroups at creation 2009-11-13 11:50:12 +00:00
vbox Add virConnectGetLibvirtVersion API 2009-11-12 10:53:26 -05:00
xen Add virConnectGetLibvirtVersion API 2009-11-12 10:53:26 -05:00
.gitignore Move virsh into tools/ directory 2009-09-21 14:41:45 +01:00
datatypes.c Allow NULL mac address in virGetInterface 2009-11-03 16:42:53 +01:00
datatypes.h Add public API definition for data stream handling 2009-09-29 15:48:52 +01:00
driver.c Log dlopen() errors more verbosely 2009-05-08 10:05:56 +00:00
driver.h Add virConnectGetLibvirtVersion API 2009-11-12 10:53:26 -05:00
gnutls_1_0_compat.h Enable the <config.h>-requiring test; fix violations 2008-01-29 18:15:54 +00:00
internal.h Add sentinel attribute for NULL terminated arg lists 2009-11-06 10:39:13 +01:00
libvirt_bridge.syms Support networking in UML driver 2009-06-03 11:13:33 +00:00
libvirt_driver_modules.syms Move --with-driver-modules symbols into a separate sym file 2009-01-05 14:06:41 +00:00
libvirt_internal.h Support a new peer-to-peer migration mode & public API 2009-10-09 12:35:07 +01:00
libvirt_linux.syms migrate linux-specific symbol names into their own sym file 2009-01-05 14:08:26 +00:00
libvirt_private.syms Implement a node device backend using libudev 2009-11-12 22:48:24 +01:00
libvirt_public.syms Add virConnectGetLibvirtVersion API 2009-11-12 10:53:26 -05:00
libvirt.c Add virConnectGetLibvirtVersion API 2009-11-12 10:53:26 -05:00
Makefile.am Add translation of PCI vendor and product IDs 2009-11-12 23:22:00 +01:00
nodeinfo.c Introduce virStrncpy. 2009-09-22 20:10:00 +02:00
nodeinfo.h Generic shared impls of all NUMA apis 2009-06-03 13:28:02 +00:00
README Add a README file to src/ explaining the directory structure 2009-09-21 14:41:47 +01:00

       libvirt library code README
       ===========================

The directory provides the bulk of the libvirt codebase. Everything
except for the libvirtd daemon and client tools. The build uses a
large number of libtool convenience libraries - one for each child
directory, and then links them together for the final libvirt.so,
although some bits get linked directly to libvirtd daemon instead.

The files directly in this directory are supporting the public API
entry points & data structures.

There are two core shared modules to be aware of:

 * util/  - a collection of shared APIs that can be used by any
            code. This directory is always in the include path
            for all things built

 * conf/  - APIs for parsing / manipulating all the official XML
            files used by the public API. This directory is only
            in the include path for driver implementation modules


Then there are the hypervisor implementations:

 * esx/          - VMware ESX and GSX support using vSphere API over SOAP
 * lxc/          - Linux Native Containers
 * opennebula/   - Open Nebula using XMLRPC
 * openvz/       - OpenVZ containers using cli tools
 * phyp/         - IBM Power Hypervisor using CLI tools over SSH
 * qemu/         - QEMU / KVM using qemu CLI/monitor
 * remote/       - Generic libvirt native RPC client
 * test/         - A "mock" driver for testing
 * uml/          - User Mode Linux
 * vbox/         - Virtual Box using native API
 * xen/          - Xen using hypercalls, XenD SEXPR & XenStore


Finally some secondary drivers that are shared for several HVs.
Currently these are used by LXC, OpenVZ, QEMU, UML and Xen drivers.
The ESX, OpenNebula, Power Hypervisor, Remote, Test & VirtualBox
drivers all implement the secondary drivers directly

 * interface/    - Host network interface management
 * network/      - Virtual NAT networking
 * node_device/  - Host device enumeration
 * secret/       - Secret management
 * security/     - Mandatory access control drivers
 * storage/      - Storage management drivers


Since both the hypervisor and secondary drivers can be built as
dlopen()able modules, it is *FORBIDDEN* to have build dependencies
between these directories. Drivers are only allowed to depend on
the public API, and the internal APIs in the util/ and conf/
directories