[libvirt] [PATCH 06/12] Introduce a new DAC security driver for QEMU

Daniel Veillard veillard at redhat.com
Wed Jan 20 17:19:03 UTC 2010


On Wed, Jan 20, 2010 at 03:15:03PM +0000, Daniel P. Berrange wrote:
> This new security driver is responsible for managing UID/GID changes
> to the QEMU process, and any files/disks/devices assigned to it.
> 
> * qemu/qemu_conf.h: Add flag for disabling automatic file permission
>   changes
> * qemu/qemu_security_dac.h, qemu/qemu_security_dac.c: New DAC driver
>   for QEMU guests
> * Makefile.am: Add new files
> ---
>  po/POTFILES.in               |    1 +
>  src/Makefile.am              |    4 +-
>  src/qemu/qemu_conf.h         |    1 +
>  src/qemu/qemu_security_dac.c |  458 ++++++++++++++++++++++++++++++++++++++++++
>  src/qemu/qemu_security_dac.h |   22 ++
>  5 files changed, 485 insertions(+), 1 deletions(-)
>  create mode 100644 src/qemu/qemu_security_dac.c
>  create mode 100644 src/qemu/qemu_security_dac.h
[...]
> + * QEMU POSIX DAC security driver
> + */
> +#include <config.h>
> +#include <selinux/selinux.h>
> +#include <selinux/context.h>

  SELinux includes not needed there either I think

Otherwise looks fine, ACK,

Daniel

-- 
Daniel Veillard      | libxml Gnome XML XSLT toolkit  http://xmlsoft.org/
daniel at veillard.com  | Rpmfind RPM search engine http://rpmfind.net/
http://veillard.com/ | virtualization library  http://libvirt.org/




More information about the libvir-list mailing list