mirror of
https://gitlab.com/libvirt/libvirt.git
synced 2025-02-02 09:55:18 +00:00
55cbb94e2e
This API allows drivers to separate out handling of @stdin_path of virSecurityManagerSetAllLabel(). The thing is, the QEMU driver uses transactions for virSecurityManagerSetAllLabel() which relabels devices from inside of domain's namespace. This is what we usually want. Except when resuming domain from a file. The file is opened before any namespace is set up and the FD is passed to QEMU to read the migration stream from. Because of this, the file lives outside of the namespace and if it so happens that the file is a block device (i.e. it lives under /dev) its copy will be created in the namespace. But the FD that is passed to QEMU points to the original living in the host and not in the namespace. So relabeling the file inside the namespace helps nothing. But if we have a separate API for relabeling the restore file then the QEMU driver can continue calling virSecurityManagerSetAllLabel() with transactions enabled and call this new API without transactions. We already have an API for relabeling a single file (virSecurityManagerDomainSetPathLabel()) but in case of SELinux it uses @imagelabel (which allows RW access) and we want to use @content_context (which allows RO access). Signed-off-by: Michal Privoznik <mprivozn@redhat.com> Reviewed-by: Erik Skultety <eskultet@redhat.com>
228 lines
12 KiB
C
228 lines
12 KiB
C
/*
|
|
* Copyright (C) 2008, 2010-2013 Red Hat, Inc.
|
|
*
|
|
* This library is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU Lesser General Public
|
|
* License as published by the Free Software Foundation; either
|
|
* version 2.1 of the License, or (at your option) any later version.
|
|
*
|
|
* This library is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
* Lesser General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Lesser General Public
|
|
* License along with this library. If not, see
|
|
* <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
#pragma once
|
|
|
|
#include "internal.h"
|
|
#include "domain_conf.h"
|
|
|
|
#include "security_manager.h"
|
|
|
|
/*
|
|
* Return values for security driver probing: the driver will determine
|
|
* whether it should be enabled or disabled.
|
|
*/
|
|
typedef enum {
|
|
SECURITY_DRIVER_ENABLE = 0,
|
|
SECURITY_DRIVER_ERROR = -1,
|
|
SECURITY_DRIVER_DISABLE = -2,
|
|
} virSecurityDriverStatus;
|
|
|
|
typedef struct _virSecurityDriver virSecurityDriver;
|
|
typedef virSecurityDriver *virSecurityDriverPtr;
|
|
|
|
typedef virSecurityDriverStatus (*virSecurityDriverProbe) (const char *virtDriver);
|
|
typedef int (*virSecurityDriverOpen) (virSecurityManagerPtr mgr);
|
|
typedef int (*virSecurityDriverClose) (virSecurityManagerPtr mgr);
|
|
|
|
typedef const char *(*virSecurityDriverGetModel) (virSecurityManagerPtr mgr);
|
|
typedef const char *(*virSecurityDriverGetDOI) (virSecurityManagerPtr mgr);
|
|
typedef const char *(*virSecurityDriverGetBaseLabel) (virSecurityManagerPtr mgr,
|
|
int virtType);
|
|
|
|
typedef int (*virSecurityDriverPreFork) (virSecurityManagerPtr mgr);
|
|
|
|
typedef int (*virSecurityDriverTransactionStart) (virSecurityManagerPtr mgr);
|
|
typedef int (*virSecurityDriverTransactionCommit) (virSecurityManagerPtr mgr,
|
|
pid_t pid,
|
|
bool lock);
|
|
typedef void (*virSecurityDriverTransactionAbort) (virSecurityManagerPtr mgr);
|
|
|
|
typedef int (*virSecurityDomainSetDaemonSocketLabel)(virSecurityManagerPtr mgr,
|
|
virDomainDefPtr vm);
|
|
typedef int (*virSecurityDomainSetSocketLabel) (virSecurityManagerPtr mgr,
|
|
virDomainDefPtr def);
|
|
typedef int (*virSecurityDomainClearSocketLabel)(virSecurityManagerPtr mgr,
|
|
virDomainDefPtr def);
|
|
typedef int (*virSecurityDomainRestoreHostdevLabel) (virSecurityManagerPtr mgr,
|
|
virDomainDefPtr def,
|
|
virDomainHostdevDefPtr dev,
|
|
const char *vroot);
|
|
typedef int (*virSecurityDomainSetHostdevLabel) (virSecurityManagerPtr mgr,
|
|
virDomainDefPtr def,
|
|
virDomainHostdevDefPtr dev,
|
|
const char *vroot);
|
|
typedef int (*virSecurityDomainSetSavedStateLabel) (virSecurityManagerPtr mgr,
|
|
virDomainDefPtr def,
|
|
const char *savefile);
|
|
typedef int (*virSecurityDomainRestoreSavedStateLabel) (virSecurityManagerPtr mgr,
|
|
virDomainDefPtr def,
|
|
const char *savefile);
|
|
typedef int (*virSecurityDomainGenLabel) (virSecurityManagerPtr mgr,
|
|
virDomainDefPtr sec);
|
|
typedef int (*virSecurityDomainReserveLabel) (virSecurityManagerPtr mgr,
|
|
virDomainDefPtr sec,
|
|
pid_t pid);
|
|
typedef int (*virSecurityDomainReleaseLabel) (virSecurityManagerPtr mgr,
|
|
virDomainDefPtr sec);
|
|
typedef int (*virSecurityDomainSetAllLabel) (virSecurityManagerPtr mgr,
|
|
virDomainDefPtr sec,
|
|
const char *stdin_path,
|
|
bool chardevStdioLogd,
|
|
bool migrated);
|
|
typedef int (*virSecurityDomainRestoreAllLabel) (virSecurityManagerPtr mgr,
|
|
virDomainDefPtr def,
|
|
bool migrated,
|
|
bool chardevStdioLogd);
|
|
typedef int (*virSecurityDomainGetProcessLabel) (virSecurityManagerPtr mgr,
|
|
virDomainDefPtr def,
|
|
pid_t pid,
|
|
virSecurityLabelPtr sec);
|
|
typedef int (*virSecurityDomainSetProcessLabel) (virSecurityManagerPtr mgr,
|
|
virDomainDefPtr def);
|
|
typedef int (*virSecurityDomainSetChildProcessLabel) (virSecurityManagerPtr mgr,
|
|
virDomainDefPtr def,
|
|
virCommandPtr cmd);
|
|
typedef int (*virSecurityDomainSecurityVerify) (virSecurityManagerPtr mgr,
|
|
virDomainDefPtr def);
|
|
typedef int (*virSecurityDomainSetImageFDLabel) (virSecurityManagerPtr mgr,
|
|
virDomainDefPtr def,
|
|
int fd);
|
|
typedef int (*virSecurityDomainSetTapFDLabel) (virSecurityManagerPtr mgr,
|
|
virDomainDefPtr def,
|
|
int fd);
|
|
typedef char *(*virSecurityDomainGetMountOptions) (virSecurityManagerPtr mgr,
|
|
virDomainDefPtr def);
|
|
typedef int (*virSecurityDomainSetHugepages) (virSecurityManagerPtr mgr,
|
|
virDomainDefPtr def,
|
|
const char *path);
|
|
|
|
typedef int (*virSecurityDomainSetImageLabel) (virSecurityManagerPtr mgr,
|
|
virDomainDefPtr def,
|
|
virStorageSourcePtr src,
|
|
virSecurityDomainImageLabelFlags flags);
|
|
typedef int (*virSecurityDomainRestoreImageLabel) (virSecurityManagerPtr mgr,
|
|
virDomainDefPtr def,
|
|
virStorageSourcePtr src,
|
|
virSecurityDomainImageLabelFlags flags);
|
|
typedef int (*virSecurityDomainMoveImageMetadata) (virSecurityManagerPtr mgr,
|
|
pid_t pid,
|
|
virStorageSourcePtr src,
|
|
virStorageSourcePtr dst);
|
|
typedef int (*virSecurityDomainSetMemoryLabel) (virSecurityManagerPtr mgr,
|
|
virDomainDefPtr def,
|
|
virDomainMemoryDefPtr mem);
|
|
typedef int (*virSecurityDomainRestoreMemoryLabel) (virSecurityManagerPtr mgr,
|
|
virDomainDefPtr def,
|
|
virDomainMemoryDefPtr mem);
|
|
typedef int (*virSecurityDomainSetInputLabel) (virSecurityManagerPtr mgr,
|
|
virDomainDefPtr def,
|
|
virDomainInputDefPtr input);
|
|
typedef int (*virSecurityDomainRestoreInputLabel) (virSecurityManagerPtr mgr,
|
|
virDomainDefPtr def,
|
|
virDomainInputDefPtr input);
|
|
typedef int (*virSecurityDomainSetPathLabel) (virSecurityManagerPtr mgr,
|
|
virDomainDefPtr def,
|
|
const char *path,
|
|
bool allowSubtree);
|
|
typedef int (*virSecurityDomainSetPathLabelRO) (virSecurityManagerPtr mgr,
|
|
virDomainDefPtr def,
|
|
const char *path);
|
|
typedef int (*virSecurityDomainSetChardevLabel) (virSecurityManagerPtr mgr,
|
|
virDomainDefPtr def,
|
|
virDomainChrSourceDefPtr dev_source,
|
|
bool chardevStdioLogd);
|
|
typedef int (*virSecurityDomainRestoreChardevLabel) (virSecurityManagerPtr mgr,
|
|
virDomainDefPtr def,
|
|
virDomainChrSourceDefPtr dev_source,
|
|
bool chardevStdioLogd);
|
|
typedef int (*virSecurityDomainSetTPMLabels) (virSecurityManagerPtr mgr,
|
|
virDomainDefPtr def);
|
|
typedef int (*virSecurityDomainRestoreTPMLabels) (virSecurityManagerPtr mgr,
|
|
virDomainDefPtr def);
|
|
|
|
|
|
struct _virSecurityDriver {
|
|
size_t privateDataLen;
|
|
const char *name;
|
|
virSecurityDriverProbe probe;
|
|
virSecurityDriverOpen open;
|
|
virSecurityDriverClose close;
|
|
|
|
virSecurityDriverGetModel getModel;
|
|
virSecurityDriverGetDOI getDOI;
|
|
|
|
virSecurityDriverPreFork preFork;
|
|
|
|
virSecurityDriverTransactionStart transactionStart;
|
|
virSecurityDriverTransactionCommit transactionCommit;
|
|
virSecurityDriverTransactionAbort transactionAbort;
|
|
|
|
virSecurityDomainSecurityVerify domainSecurityVerify;
|
|
|
|
virSecurityDomainSetImageLabel domainSetSecurityImageLabel;
|
|
virSecurityDomainRestoreImageLabel domainRestoreSecurityImageLabel;
|
|
virSecurityDomainMoveImageMetadata domainMoveImageMetadata;
|
|
|
|
virSecurityDomainSetMemoryLabel domainSetSecurityMemoryLabel;
|
|
virSecurityDomainRestoreMemoryLabel domainRestoreSecurityMemoryLabel;
|
|
|
|
virSecurityDomainSetInputLabel domainSetSecurityInputLabel;
|
|
virSecurityDomainRestoreInputLabel domainRestoreSecurityInputLabel;
|
|
|
|
virSecurityDomainSetDaemonSocketLabel domainSetSecurityDaemonSocketLabel;
|
|
virSecurityDomainSetSocketLabel domainSetSecuritySocketLabel;
|
|
virSecurityDomainClearSocketLabel domainClearSecuritySocketLabel;
|
|
|
|
virSecurityDomainGenLabel domainGenSecurityLabel;
|
|
virSecurityDomainReserveLabel domainReserveSecurityLabel;
|
|
virSecurityDomainReleaseLabel domainReleaseSecurityLabel;
|
|
|
|
virSecurityDomainGetProcessLabel domainGetSecurityProcessLabel;
|
|
virSecurityDomainSetProcessLabel domainSetSecurityProcessLabel;
|
|
virSecurityDomainSetChildProcessLabel domainSetSecurityChildProcessLabel;
|
|
|
|
virSecurityDomainSetAllLabel domainSetSecurityAllLabel;
|
|
virSecurityDomainRestoreAllLabel domainRestoreSecurityAllLabel;
|
|
|
|
virSecurityDomainSetHostdevLabel domainSetSecurityHostdevLabel;
|
|
virSecurityDomainRestoreHostdevLabel domainRestoreSecurityHostdevLabel;
|
|
|
|
virSecurityDomainSetSavedStateLabel domainSetSavedStateLabel;
|
|
virSecurityDomainRestoreSavedStateLabel domainRestoreSavedStateLabel;
|
|
|
|
virSecurityDomainSetImageFDLabel domainSetSecurityImageFDLabel;
|
|
virSecurityDomainSetTapFDLabel domainSetSecurityTapFDLabel;
|
|
|
|
virSecurityDomainGetMountOptions domainGetSecurityMountOptions;
|
|
|
|
virSecurityDriverGetBaseLabel getBaseLabel;
|
|
|
|
virSecurityDomainSetPathLabel domainSetPathLabel;
|
|
virSecurityDomainSetPathLabelRO domainSetPathLabelRO;
|
|
|
|
virSecurityDomainSetChardevLabel domainSetSecurityChardevLabel;
|
|
virSecurityDomainRestoreChardevLabel domainRestoreSecurityChardevLabel;
|
|
|
|
virSecurityDomainSetTPMLabels domainSetSecurityTPMLabels;
|
|
virSecurityDomainRestoreTPMLabels domainRestoreSecurityTPMLabels;
|
|
};
|
|
|
|
virSecurityDriverPtr virSecurityDriverLookup(const char *name,
|
|
const char *virtDriver);
|