[libvirt] [PATCHv4 12/15] qemu: use common API for reading difficult files

Eric Blake eblake at redhat.com
Fri Mar 25 21:56:43 UTC 2011


On 03/10/2011 05:14 AM, Daniel P. Berrange wrote:
> On Wed, Mar 09, 2011 at 07:18:30PM -0700, Eric Blake wrote:
>> Direct access to an open file is so much simpler than passing
>> everything through a pipe!
> 
> Did you test with SELinux in enforcing mode - there's a very
> slight chance this could impact things, though I think we
> do label all FDs correctly these days.

Yes, I did, and things still worked to a local disk (where I'm assuming
SELinux enforcing would have stopped me).  In fact, when passing the fd
via SCM_RIGHTS, things still worked even without relabeling the file
(although I have no idea if that's a hole in SELinux enforcing).  I'm
still in the middle of testing saving to a root-squash NFS location,
then I will repost this series for one last review.

> 
>> * src/qemu/qemu_driver.c (qemudOpenAsUID)
>> (qemudDomainSaveImageClose): Delete.
>> (qemudDomainSaveImageOpen): Rename...
>> (qemuDomainSaveImageOpen): ...and drop read_pid argument.  Use
>> virFileOpenAs instead of qemudOpenAsUID.

-- 
Eric Blake   eblake at redhat.com    +1-801-349-2682
Libvirt virtualization library http://libvirt.org

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 619 bytes
Desc: OpenPGP digital signature
URL: <http://listman.redhat.com/archives/libvir-list/attachments/20110325/b4ba3c01/attachment-0001.sig>


More information about the libvir-list mailing list