[libvirt] [PATCH v3 1/3] security: Rename SetSocketLabel APIs to SetDaemonSocketLabel

Daniel P. Berrange berrange at redhat.com
Fri Aug 26 09:40:17 UTC 2011


On Fri, Aug 26, 2011 at 10:23:46AM +0200, Jiri Denemark wrote:
> The APIs are designed to label a socket in a way that the libvirt daemon
> itself is able to access it (i.e., in SELinux the label is virtd_t based
> as opposed to svirt_* we use for labeling resources that need to be
> accessed by a vm). The new name reflects this.
> ---
> Notes:
>     Version 3:
>     - new patch
> 
>  src/libvirt_private.syms        |    2 +-
>  src/qemu/qemu_process.c         |    3 ++-
>  src/security/security_dac.c     |    6 +++---
>  src/security/security_driver.h  |    6 +++---
>  src/security/security_manager.c |    8 ++++----
>  src/security/security_manager.h |    4 ++--
>  src/security/security_nop.c     |    6 +++---
>  src/security/security_selinux.c |    6 +++---
>  src/security/security_stack.c   |   10 +++++-----
>  9 files changed, 26 insertions(+), 25 deletions(-)

Everyone always forgets about the poor apparmour driver since it isn't
compiled in Fedora/RHEL.... :-(

Daniel
-- 
|: http://berrange.com      -o-    http://www.flickr.com/photos/dberrange/ :|
|: http://libvirt.org              -o-             http://virt-manager.org :|
|: http://autobuild.org       -o-         http://search.cpan.org/~danberr/ :|
|: http://entangle-photo.org       -o-       http://live.gnome.org/gtk-vnc :|




More information about the libvir-list mailing list