[libvirt] [PATCHv3 2/2] audit: audit use of /dev/net/tun, /dev/tapN, /dev/vhost-net
Eric Blake
eblake at redhat.com
Thu Mar 10 16:49:22 UTC 2011
On 03/10/2011 09:16 AM, Laine Stump wrote:
> On 03/09/2011 03:42 PM, Eric Blake wrote:
>> Opening raw network devices with the intent of passing those fds to
>> qemu is worth an audit point.
<long commit message>
Hmm, we really ought to have some sort of documentation that describes
all possible audit messages, but that can be a separate patch.
>> +++ b/src/qemu/qemu_hotplug.c
>> @@ -576,7 +576,8 @@ int qemuDomainAttachNetDevice(virConnectPtr conn,
>> return -1;
>> }
>>
>> - if ((tapfd = qemuNetworkIfaceConnect(conn, driver, net,
>> qemuCaps))< 0)
>> + if ((tapfd = qemuNetworkIfaceConnect(vm->def, conn, driver, net,
>> + qemuCaps))< 0)
This part needed some tweaks to rebase on top of the modified 1/2.
Pretty mechanical, though.
>
> ACK
Thanks; pushed.
--
Eric Blake eblake at redhat.com +1-801-349-2682
Libvirt virtualization library http://libvirt.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 619 bytes
Desc: OpenPGP digital signature
URL: <http://listman.redhat.com/archives/libvir-list/attachments/20110310/11e61eb0/attachment-0001.sig>
More information about the libvir-list
mailing list