libvirt/src
Erik Skultety fb0b9a2cc5 qemu: Log error if domain uses security driver which is not loaded
When starting a domain, if a domain specifies security drivers we do not have
loaded, we fail. However we don't check for this during
reconnect, so any operation relying on security driver functionality would fail.
If someone e.g. starts a domain with selinux driver loaded, then they change
the security driver to 'none' in config, restart the daemon and call dump/save/..,
QEMU will return an error.
As we shouldn't kill the domain, we should at least log an error to let the
user know that domain reconnect wasn't completely clean.

https://bugzilla.redhat.com/show_bug.cgi?id=1183893
2015-05-21 12:33:52 +02:00
..
access build: fix mingw printing of pid 2014-12-08 15:01:24 -07:00
bhyve virDomainObjListFindByName: Return referenced object 2015-04-24 13:22:45 +02:00
conf conf: Restore the XML parser context in virDomainMemoryDefParseXML 2015-05-21 11:06:18 +02:00
cpu cpu: Honor vendor_id override in host-model 2015-04-30 15:34:57 +02:00
esx domain: conf: Drop expectedVirtTypes 2015-04-20 16:43:43 -04:00
hyperv domain: Convert os.type to VIR_DOMAIN_OSTYPE enum 2015-04-20 16:40:09 -04:00
interface Removing probing of secondary drivers 2015-01-27 12:02:04 +00:00
libxl conf: make virNodeDevCapData an official type 2015-05-18 10:22:20 -04:00
locking locking: relax PID requirement 2015-04-22 14:16:44 -06:00
lxc virDomainNumatuneGetMode: Report if numatune was defined 2015-05-20 14:02:25 +02:00
network Fix build --without-network 2015-05-13 15:04:41 +02:00
node_device node_device: replace duplicated code in hal and udev backends 2015-05-18 10:34:01 -04:00
nwfilter nwfilter: Partly initialize driver even for non-privileged users 2015-04-17 10:04:05 +02:00
openvz openvz: Drop useless domain lookup 2015-04-27 11:26:37 +02:00
parallels virDomainNumatuneGetMode: Report if numatune was defined 2015-05-20 14:02:25 +02:00
phyp domain: conf: Drop unused OSTYPE_AIX 2015-04-29 09:42:26 -04:00
qemu qemu: Log error if domain uses security driver which is not loaded 2015-05-21 12:33:52 +02:00
remote remote: Add support for AddIOThread and DelIOThread 2015-04-27 12:36:36 -04:00
rpc gendispatch: Don't generate long lines 2015-05-14 15:03:33 +02:00
secret Removing probing of secondary drivers 2015-01-27 12:02:04 +00:00
security domain: conf: Drop expectedVirtTypes 2015-04-20 16:43:43 -04:00
storage virfile: virDirCreate: Drop redundant FORCE_PERMS flag 2015-05-19 19:29:39 -04:00
test conf: make virNodeDevCapData an official type 2015-05-18 10:22:20 -04:00
uml uml: s/virDomainObjListFindByID/virDomainObjListFindByUUID/ 2015-04-24 13:26:09 +02:00
util virfile: virDirCreate: Drop redundant FORCE_PERMS flag 2015-05-19 19:29:39 -04:00
vbox Add privateData to virDomainDiskDef 2015-05-15 08:04:26 +02:00
vmware domain: conf: Drop expectedVirtTypes 2015-04-20 16:43:43 -04:00
vmx Add privateData to virDomainDiskDef 2015-05-15 08:04:26 +02:00
xen conf: make virNodeDevCapData an official type 2015-05-18 10:22:20 -04:00
xenapi domain: conf: Drop expectedVirtTypes 2015-04-20 16:43:43 -04:00
xenconfig xenconfig: fix spice mousemode and copypaste 2015-05-18 12:46:16 -06:00
check-aclperms.pl Fix naming of permission for detecting storage pools 2013-09-12 17:20:07 +01:00
check-aclrules.pl maint: fix line numbers in check-aclrules reports 2014-02-10 14:07:22 -07:00
check-driverimpls.pl Removing probing of secondary drivers 2015-01-27 12:02:04 +00:00
check-drivername.pl Extend previous check to validate driver struct field names 2013-04-24 10:59:53 +01:00
check-symfile.pl maint: use LGPL correctly 2013-05-20 14:03:48 -06:00
check-symsorting.pl maint: use LGPL correctly 2013-05-20 14:03:48 -06:00
datatypes.c Change virConnectPtr into virObjectLocklable 2015-04-15 13:33:35 +02:00
datatypes.h Change virConnectPtr into virObjectLocklable 2015-04-15 13:33:35 +02:00
driver-hypervisor.h Implement virDomainAddIOThread and virDomainDelIOThread 2015-04-27 12:36:36 -04:00
driver-interface.h Removing probing of secondary drivers 2015-01-27 12:02:04 +00:00
driver-network.h Removing probing of secondary drivers 2015-01-27 12:02:04 +00:00
driver-nodedev.h Removing probing of secondary drivers 2015-01-27 12:02:04 +00:00
driver-nwfilter.h Removing probing of secondary drivers 2015-01-27 12:02:04 +00:00
driver-secret.h Removing probing of secondary drivers 2015-01-27 12:02:04 +00:00
driver-state.h Split driver.h into multiple parts 2014-10-23 11:10:05 +01:00
driver-storage.h Removing probing of secondary drivers 2015-01-27 12:02:04 +00:00
driver-stream.h Split driver.h into multiple parts 2014-10-23 11:10:05 +01:00
driver.c Use the DEFAULT_DRIVER_DIR macro 2015-04-02 10:27:56 +02:00
driver.h Removing probing of secondary drivers 2015-01-27 12:02:04 +00:00
dtrace2systemtap.pl maint: fix up copyright notice inconsistencies 2012-09-20 16:30:55 -06:00
fdstream.c storage: tweak condition to properly test lseek 2015-03-04 14:51:44 +01:00
fdstream.h fdstream: introduce virFDStreamOpenBlockDevice 2014-08-25 10:46:13 +04:00
gnutls_1_0_compat.h maint: don't use config.h in .h files 2013-06-05 05:53:25 -06:00
internal.h internal: introduce macro helpers to check flag requirements 2015-05-04 09:20:00 +02:00
libvirt_atomic.syms maint: check all symfiles for sorting 2013-02-22 16:48:12 -07:00
libvirt_driver_modules.syms Use virFileFindResource to locate driver plugins 2014-04-25 11:59:46 +01:00
libvirt_esx.syms maint: enforce private symbol section sorting 2013-02-20 08:27:03 -07:00
libvirt_gnutls.syms Add APIs to get at more client security data 2013-03-19 13:11:46 +00:00
libvirt_internal.h don't disable state driver when libvirtd is not built 2015-01-27 12:02:04 +00:00
libvirt_libssh2.syms maint: enforce private symbol section sorting 2013-02-20 08:27:03 -07:00
libvirt_linux.syms util: virstatslinux: make more generic 2014-07-15 22:00:59 +04:00
libvirt_lxc.syms Apply security label when entering LXC namespaces 2013-03-13 15:16:37 +00:00
libvirt_openvz.syms maint: enforce private symbol section sorting 2013-02-20 08:27:03 -07:00
libvirt_private.syms libvirt: Introduce protected key mgmt ops 2015-05-18 09:53:13 +02:00
libvirt_probes.d Add systemd/dtrace probes for DBus APIs 2015-01-15 11:07:13 +00:00
libvirt_public.syms Implement virDomainAddIOThread and virDomainDelIOThread 2015-04-27 12:36:36 -04:00
libvirt_qemu_probes.d build: fix binary location in stap files --with-driver-modules 2012-08-10 23:11:26 -04:00
libvirt_qemu.syms qemu: new API for tracking arbitrary monitor events 2014-03-20 11:25:37 -06:00
libvirt_remote.syms remote: create virNetServerServiceNewFDOrUNIX() wrapper 2014-08-22 09:12:13 +02:00
libvirt_sasl.syms Add APIs to get at more client security data 2013-03-19 13:11:46 +00:00
libvirt_vmware.syms VMware: Make version parsing testable and add tests 2013-09-20 08:23:31 -05:00
libvirt_vmx.syms VMX: Create virVMXFormatDisk() from HD and CD-ROM 2013-09-01 23:11:50 -05:00
libvirt_xenconfig.syms Revert "src/xenconfig: Xen-xl parser" 2015-01-12 10:15:13 -07:00
libvirt_xenxlconfig.syms Introduce support for parsing/formatting Xen xl config format 2015-01-14 08:28:50 -07:00
libvirt-domain-snapshot.c use new macro helpers to check flag requirements 2015-05-04 09:20:01 +02:00
libvirt-domain.c reject out of range memory in SetMemory APIs 2015-05-14 17:17:40 +02:00
libvirt-host.c Change virConnectPtr into virObjectLocklable 2015-04-15 13:33:35 +02:00
libvirt-interface.c iface-define: update and unify documentation 2015-03-09 14:47:07 +01:00
libvirt-lxc.c Remove unnecessary curly brackets in rest of src/[a-n]*/ 2014-11-14 17:13:36 +01:00
libvirt-lxc.pc.in Fix build-time pkg-config files in VPATH 2014-11-06 15:59:28 +01:00
libvirt-network.c net-define: update or unify documentation 2015-03-09 14:48:38 +01:00
libvirt-nodedev.c Remove unnecessary curly brackets in rest of src/[a-n]*/ 2014-11-14 17:13:36 +01:00
libvirt-nwfilter.c Move virNWFilter related APIs out of libvirt.c 2014-10-24 16:15:46 +01:00
libvirt-qemu.c Indent top-level labels by one space in the rest of src/ 2014-03-25 14:58:40 +01:00
libvirt-qemu.pc.in Fix build-time pkg-config files in VPATH 2014-11-06 15:59:28 +01:00
libvirt-secret.c Typos: Get rid of dependan(t|cies) 2015-04-02 16:05:32 +02:00
libvirt-storage.c pool-define: update and unify documentation 2015-03-09 14:47:53 +01:00
libvirt-stream.c Move virStream related APIs out of libvirt.c 2014-10-24 16:42:49 +01:00
libvirt.c Removing probing of secondary drivers 2015-01-27 12:02:04 +00:00
libvirt.conf Allow overriding default URI in config file 2012-03-15 11:20:17 +00:00
libvirt.pc.in Fix build-time pkg-config files in VPATH 2014-11-06 15:59:28 +01:00
lock_protocol-structs tests: check remaining .x files 2013-09-09 12:04:03 -06:00
lxc_monitor_protocol-structs tests: check remaining .x files 2013-09-09 12:04:03 -06:00
lxc_protocol-structs build: add new file, for lxc_protocol checking 2013-01-15 12:01:22 -07:00
Makefile.am node device: prepare node_device_linux_sysfs.c to add more functions 2015-05-18 10:30:27 -04:00
nodeinfo.c nodeinfo: Increase the num of CPU thread siblings to a larger value 2015-03-27 10:20:56 +01:00
nodeinfo.h Fix virCgroupGetPercpuStats with non-continuous present CPUs 2015-01-22 17:01:11 +01:00
nodeinfopriv.h nodeinfo: Introduce @arch to linuxNodeInfoCPUPopulate 2014-06-20 15:46:52 +02:00
qemu_protocol-structs qemu: wire up RPC for qemu monitor events 2014-03-20 11:25:37 -06:00
README bhyve: add basic documentation 2014-03-01 23:44:58 +04:00
remote_protocol-structs remote: Add support for AddIOThread and DelIOThread 2015-04-27 12:36:36 -04:00
virkeepaliveprotocol-structs build: Properly generate and check virkeepaliveprotocol-structs 2011-11-24 14:44:04 +01:00
virnetprotocol-structs Extend RPC protocol to allow FD passing 2011-10-28 10:27:15 +01:00

       libvirt library code README
       ===========================

The directory provides the bulk of the libvirt codebase. Everything
except for the libvirtd daemon and client tools. The build uses a
large number of libtool convenience libraries - one for each child
directory, and then links them together for the final libvirt.so,
although some bits get linked directly to libvirtd daemon instead.

The files directly in this directory are supporting the public API
entry points & data structures.

There are two core shared modules to be aware of:

 * util/  - a collection of shared APIs that can be used by any
            code. This directory is always in the include path
            for all things built

 * conf/  - APIs for parsing / manipulating all the official XML
            files used by the public API. This directory is only
            in the include path for driver implementation modules

 * vmx/   - VMware VMX config handling (used by esx/ and vmware/)


Then there are the hypervisor implementations:

 * bhyve         - bhyve - The BSD Hypervisor
 * esx/          - VMware ESX and GSX support using vSphere API over SOAP
 * hyperv/       - Microsoft Hyper-V support using WinRM
 * lxc/          - Linux Native Containers
 * openvz/       - OpenVZ containers using cli tools
 * phyp/         - IBM Power Hypervisor using CLI tools over SSH
 * qemu/         - QEMU / KVM using qemu CLI/monitor
 * remote/       - Generic libvirt native RPC client
 * test/         - A "mock" driver for testing
 * uml/          - User Mode Linux
 * vbox/         - Virtual Box using native API
 * vmware/       - VMware Workstation and Player using the vmrun tool
 * xen/          - Xen using hypercalls, XenD SEXPR & XenStore
 * xenapi/       - Xen using libxenserver


Finally some secondary drivers that are shared for several HVs.
Currently these are used by LXC, OpenVZ, QEMU, UML and Xen drivers.
The ESX, Hyper-V, Power Hypervisor, Remote, Test & VirtualBox drivers all
implement the secondary drivers directly

 * cpu/          - CPU feature management
 * interface/    - Host network interface management
 * network/      - Virtual NAT networking
 * nwfilter/     - Network traffic filtering rules
 * node_device/  - Host device enumeration
 * secret/       - Secret management
 * security/     - Mandatory access control drivers
 * storage/      - Storage management drivers


Since both the hypervisor and secondary drivers can be built as
dlopen()able modules, it is *FORBIDDEN* to have build dependencies
between these directories. Drivers are only allowed to depend on
the public API, and the internal APIs in the util/ and conf/
directories