[libvirt] Per-guest configurable user/group for QEMU processes

[Daniel P. Berrange]

On Wed, Mar 07, 2012 at 02:35:38PM -0300, Marcelo Henrique Cerri wrote:
> On Mon, 27 Feb 2012 12:48:55 -0300
> Marcelo Cerri <mhcerri at linux.vnet.ibm.com> wrote:
> 
> Just one more point. I'd like to validate the direction that I'm
> getting. 
> 
> I updated the XML parse and replaced the "seclabel" member in
> virDomainDef with:
> 
>     size_t nseclabels;
>     virSecurityLabelDefPtr *seclabels;
> 
> I also added a "model" field in virSecurityLabelDef to identify the sec
> driver. So, my idea is to replace any access to the seclabel  with a
> search by the model name. So, for example, instead of using
> 
> 	secdef = def->seclabels;
> 
> I'll use:
> 
> 	secdef = virDomainDefGetSecurityLabelDef(def,
> 			SECURITY_SELINUX_NAME);
> 
> virDomainDefGetSecurityLabelDef will search for a seclabel with the
> given model/name.
> 
> I'm having to update too many parts in the code and I'd like
> to save some time if this is not the right direction.

I think this sounds like a reasonable approach to me.


Daniel
-- 
|: http://berrange.com      -o-    http://www.flickr.com/photos/dberrange/ :|
|: http://libvirt.org              -o-             http://virt-manager.org :|
|: http://autobuild.org       -o-         http://search.cpan.org/~danberr/ :|
|: http://entangle-photo.org       -o-       http://live.gnome.org/gtk-vnc :|