[libvirt] [PATCH] Use virFileResolveLink instead of readlink in AppArmor
Chris Lalancette
clalance at redhat.com
Thu Jan 21 17:00:51 UTC 2010
On 01/21/2010 11:49 AM, Jamie Strandboge wrote:
> Was this patch tested? I initially tried to use virFileResolveLink() but
> could not. This was discussed in "[libvirt] [PATCH 0/4] AppArmor
> updates" from 11/12/2009:
>
> "Implements all changes requested by DV except for getting rid of
> readlink(). I can't use virFileResolveLink() because it lstat()s the
> file and uses st.st_size to create a buffer. Unfortunately, running
> lstat() on /proc/self/exe results in st.st_size to be 0."
>
> Unless virFileResolveLink() was changed, this patch will break AppArmor.
>
> Jamie
Ah, I should have mentioned that. I only compile tested it. However,
virFileResolveLink() was indeed changed to use gnulib's areadlink()
function instead of the previous lstat()/readlink(), so it may work now.
Do you have a test environment to test it out quickly?
--
Chris Lalancette
More information about the libvir-list
mailing list