mirror of
https://gitlab.com/libvirt/libvirt.git
synced 2024-07-30 13:37:17 +00:00
686026225e
Extend the 'gendispatch.pl' script to be able to generate
three new types of file.
- 'aclheader' - defines signatures of helper APIs for
doing authorization checks. There is one helper API
for each API requiring an auth check. Any @acl
annotations result in a method being generated with
a suffix of 'EnsureACL'. If the ACL check requires
examination of flags, an extra 'flags' param will be
present. Some examples
extern int virConnectBaselineCPUEnsureACL(void);
extern int virConnectDomainEventDeregisterEnsureACL(virDomainDefPtr domain);
extern int virDomainAttachDeviceFlagsEnsureACL(virDomainDefPtr domain, unsigned int flags);
Any @aclfilter annotations resuilt in a method being
generated with a suffix of 'CheckACL'.
extern int virConnectListAllDomainsCheckACL(virDomainDefPtr domain);
These are used for filtering individual objects from APIs
which return a list of objects
- 'aclbody' - defines the actual implementation of the
methods described above. This calls into the access
manager APIs. A complex example:
/* Returns: -1 on error (denied==error), 0 on allowed */
int virDomainAttachDeviceFlagsEnsureACL(virConnectPtr conn,
virDomainDefPtr domain,
unsigned int flags)
{
virAccessManagerPtr mgr;
int rv;
if (!(mgr = virAccessManagerGetDefault()))
return -1;
if ((rv = virAccessManagerCheckDomain(mgr,
conn->driver->name,
domain,
VIR_ACCESS_PERM_DOMAIN_WRITE)) <= 0) {
virObjectUnref(mgr);
if (rv == 0)
virReportError(VIR_ERR_ACCESS_DENIED, NULL);
return -1;
}
if (((flags & (VIR_DOMAIN_AFFECT_CONFIG|VIR_DOMAIN_AFFECT_LIVE)) == 0) &&
(rv = virAccessManagerCheckDomain(mgr,
conn->driver->name,
domain,
VIR_ACCESS_PERM_DOMAIN_SAVE)) <= 0) {
virObjectUnref(mgr);
if (rv == 0)
virReportError(VIR_ERR_ACCESS_DENIED, NULL);
return -1;
}
if (((flags & (VIR_DOMAIN_AFFECT_CONFIG)) == (VIR_DOMAIN_AFFECT_CONFIG)) &&
(rv = virAccessManagerCheckDomain(mgr,
conn->driver->name,
domain,
VIR_ACCESS_PERM_DOMAIN_SAVE)) <= 0) {
virObjectUnref(mgr);
if (rv == 0)
virReportError(VIR_ERR_ACCESS_DENIED, NULL);
return -1;
}
virObjectUnref(mgr);
return 0;
}
- 'aclsyms' - generates a linker script to export the
APIs to drivers. Some examples
virConnectBaselineCPUEnsureACL;
virConnectCompareCPUEnsureACL;
Signed-off-by: Daniel P. Berrange <berrange@redhat.com>
238 lines
4.4 KiB
Plaintext
238 lines
4.4 KiB
Plaintext
*#*#
|
|
*.#*#
|
|
*.a
|
|
*.cov
|
|
*.exe
|
|
*.gcda
|
|
*.gcno
|
|
*.gcov
|
|
*.html
|
|
*.i
|
|
*.la
|
|
*.lo
|
|
*.loT
|
|
*.o
|
|
*.orig
|
|
*.pyc
|
|
*.rej
|
|
*.s
|
|
*~
|
|
.#*
|
|
.deps
|
|
.gdb_history
|
|
.git
|
|
.git-module-status
|
|
.libs
|
|
.lvimrc
|
|
.memdump
|
|
.sc-start-sc_*
|
|
/ABOUT-NLS
|
|
/AUTHORS
|
|
/ChangeLog
|
|
/GNUmakefile
|
|
/INSTALL
|
|
/NEWS
|
|
/aclocal.m4
|
|
/autom4te.cache
|
|
/build-aux
|
|
/build-aux/
|
|
/build/
|
|
/config.cache
|
|
/config.guess
|
|
/config.h
|
|
/config.h.in
|
|
/config.log
|
|
/config.rpath
|
|
/config.status
|
|
/config.sub
|
|
/configure
|
|
/configure.lineno
|
|
/daemon/*_dispatch.h
|
|
/daemon/libvirt_qemud
|
|
/daemon/libvirtd
|
|
/daemon/libvirtd*.logrotate
|
|
/daemon/libvirtd.8
|
|
/daemon/libvirtd.8.in
|
|
/daemon/libvirtd.init
|
|
/daemon/libvirtd.pod
|
|
/daemon/libvirtd.policy
|
|
/daemon/libvirtd.service
|
|
/daemon/test_libvirtd.aug
|
|
/docs/apibuild.py.stamp
|
|
/docs/devhelp/libvirt.devhelp
|
|
/docs/hvsupport.html.in
|
|
/docs/libvirt-api.xml
|
|
/docs/libvirt-lxc-*.xml
|
|
/docs/libvirt-qemu-*.xml
|
|
/docs/libvirt-refs.xml
|
|
/docs/search.php
|
|
/docs/todo.html.in
|
|
/examples/domain-events/events-c/event-test
|
|
/examples/dominfo/info1
|
|
/examples/domsuspend/suspend
|
|
/examples/hellolibvirt/hellolibvirt
|
|
/examples/openauth/openauth
|
|
/gnulib/lib/*
|
|
/gnulib/m4/*
|
|
/gnulib/tests/*
|
|
/include/libvirt/libvirt.h
|
|
/libtool
|
|
/libvirt-*.tar.gz
|
|
/libvirt-[0-9]*
|
|
/libvirt.pc
|
|
/libvirt.spec
|
|
/ltconfig
|
|
/ltmain.sh
|
|
/m4/*
|
|
/maint.mk
|
|
/mingw-libvirt.spec
|
|
/mkinstalldirs
|
|
/po/*
|
|
/proxy/
|
|
/python/generated.stamp
|
|
/python/generator.py.stamp
|
|
/python/libvirt-export.c
|
|
/python/libvirt-lxc-export.c
|
|
/python/libvirt-lxc.[ch]
|
|
/python/libvirt-qemu-export.c
|
|
/python/libvirt-qemu.[ch]
|
|
/python/libvirt.[ch]
|
|
/python/libvirt.py
|
|
/python/libvirt_lxc.py
|
|
/python/libvirt_qemu.py
|
|
/run
|
|
/sc_*
|
|
/src/.*.stamp
|
|
/src/access/org.libvirt.api.policy
|
|
/src/access/viraccessapicheck.c
|
|
/src/access/viraccessapicheck.h
|
|
/src/access/viraccessapichecklxc.c
|
|
/src/access/viraccessapichecklxc.h
|
|
/src/access/viraccessapicheckqemu.c
|
|
/src/access/viraccessapicheckqemu.h
|
|
/src/esx/*.generated.*
|
|
/src/hyperv/*.generated.*
|
|
/src/libvirt*.def
|
|
/src/libvirt.syms
|
|
/src/libvirt_access.syms
|
|
/src/libvirt_access_lxc.syms
|
|
/src/libvirt_access_qemu.syms
|
|
/src/libvirt_*.stp
|
|
/src/libvirt_*helper
|
|
/src/libvirt_*probes.h
|
|
/src/libvirt_lxc
|
|
/src/locking/lock_daemon_dispatch_stubs.h
|
|
/src/locking/lock_protocol.[ch]
|
|
/src/locking/qemu-lockd.conf
|
|
/src/locking/qemu-sanlock.conf
|
|
/src/locking/test_libvirt_sanlock.aug
|
|
/src/lxc/lxc_controller_dispatch.h
|
|
/src/lxc/lxc_monitor_dispatch.h
|
|
/src/lxc/lxc_monitor_protocol.c
|
|
/src/lxc/lxc_monitor_protocol.h
|
|
/src/lxc/lxc_protocol.[ch]
|
|
/src/lxc/test_libvirtd_lxc.aug
|
|
/src/qemu/test_libvirtd_qemu.aug
|
|
/src/remote/*_client_bodies.h
|
|
/src/remote/*_protocol.[ch]
|
|
/src/rpc/virkeepaliveprotocol.[ch]
|
|
/src/rpc/virnetprotocol.[ch]
|
|
/src/test_libvirt*.aug
|
|
/src/util/virkeymaps.h
|
|
/src/virt-aa-helper
|
|
/src/virtlockd
|
|
/src/virtlockd.init
|
|
/tests/*.log
|
|
/tests/*.pid
|
|
/tests/*.trs
|
|
/tests/*xml2*test
|
|
/tests/commandhelper
|
|
/tests/commandtest
|
|
/tests/conftest
|
|
/tests/cputest
|
|
/tests/domainsnapshotxml2xmltest
|
|
/tests/esxutilstest
|
|
/tests/eventtest
|
|
/tests/fchosttest
|
|
/tests/fdstreamtest
|
|
/tests/hashtest
|
|
/tests/jsontest
|
|
/tests/libvirtdconftest
|
|
/tests/networkxml2argvtest
|
|
/tests/nodeinfotest
|
|
/tests/nwfilterxml2xmltest
|
|
/tests/object-locking
|
|
/tests/object-locking-files.txt
|
|
/tests/object-locking.cm[ix]
|
|
/tests/openvzutilstest
|
|
/tests/qemuargv2xmltest
|
|
/tests/qemuhelptest
|
|
/tests/qemumonitorjsontest
|
|
/tests/qemumonitortest
|
|
/tests/qemuxmlnstest
|
|
/tests/qparamtest
|
|
/tests/reconnect
|
|
/tests/secaatest
|
|
/tests/seclabeltest
|
|
/tests/securityselinuxlabeltest
|
|
/tests/securityselinuxtest
|
|
/tests/sexpr2xmltest
|
|
/tests/shunloadtest
|
|
/tests/sockettest
|
|
/tests/ssh
|
|
/tests/statstest
|
|
/tests/storagebackendsheepdogtest
|
|
/tests/sysinfotest
|
|
/tests/test_conf
|
|
/tests/utiltest
|
|
/tests/viratomictest
|
|
/tests/virauthconfigtest
|
|
/tests/virbitmaptest
|
|
/tests/virbuftest
|
|
/tests/vircgrouptest
|
|
/tests/virdrivermoduletest
|
|
/tests/virendiantest
|
|
/tests/virhashtest
|
|
/tests/viridentitytest
|
|
/tests/virkeycodetest
|
|
/tests/virkeyfiletest
|
|
/tests/virlockspacetest
|
|
/tests/virnet*test
|
|
/tests/virportallocatortest
|
|
/tests/virshtest
|
|
/tests/virstoragetest
|
|
/tests/virstringtest
|
|
/tests/virtimetest
|
|
/tests/viruritest
|
|
/tests/vmx2xmltest
|
|
/tests/xencapstest
|
|
/tests/xmconfigtest
|
|
/tools/*.[18]
|
|
/tools/libvirt-guests.init
|
|
/tools/libvirt-guests.service
|
|
/tools/libvirt-guests.sh
|
|
/tools/virsh
|
|
/tools/virsh-*-edit.c
|
|
/tools/virt-*-validate
|
|
/tools/virt-sanlock-cleanup
|
|
/update.log
|
|
Makefile
|
|
Makefile.in
|
|
TAGS
|
|
coverage
|
|
cscope.files
|
|
cscope.in.out
|
|
cscope.out
|
|
cscope.po.out
|
|
results.log
|
|
stamp-h
|
|
stamp-h.in
|
|
stamp-h1
|
|
tags
|
|
!/gnulib/lib/Makefile.am
|
|
!/gnulib/tests/Makefile.am
|
|
!/m4/virt-*.m4
|
|
!/po/*.po
|
|
!/po/POTFILES.in
|
|
!/po/libvirt.pot
|