libvirt

mirror of https://gitlab.com/libvirt/libvirt.git synced 2025-02-02 18:05:20 +00:00

History

Michal Privoznik e0d1a378dc security: Don't skip relabel for all chardevs

Our commit e13e8808f9 was way too generic. Currently, virtlogd is
used only for chardevs type of file and nothing else. True, we
must not relabel the path in this case, but we have to in all
other cases. For instance, if you want to have a physical console
attached to your guest:

    <console type='dev'>
      <source path='/dev/ttyS0'/>
      <target type='virtio' port='1'/>
    </console>

Starting such domain fails because qemu doesn't have access to
/dev/ttyS0 because we haven't relabelled the path.

Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
Reviewed-by: John Ferlan <jferlan@redhat.com>

2017-06-22 14:28:15 +02:00

security_apparmor.c

security: don't relabel chardev source if virtlogd is used as stdio handler

2017-06-16 16:00:10 +02:00

security_apparmor.h

maint: fix up copyright notice inconsistencies

2012-09-20 16:30:55 -06:00

security_dac.c

security: Don't skip relabel for all chardevs

2017-06-22 14:28:15 +02:00

security_dac.h

security: DAC: Introduce callback to perform image chown