[libvirt] [PATCH v3 0/2] expose baselabel for each sec model/virt type

Daniel P. Berrange berrange at redhat.com
Thu Oct 17 13:00:39 UTC 2013


On Thu, Oct 17, 2013 at 02:55:04PM +0200, Giuseppe Scrivano wrote:
> Giuseppe Scrivano <gscrivan at redhat.com> writes:
> 
> > Now each security model can define its own base label, that describes
> > the default security context used by libvirt to run an hypervisor
> > process.  This information is exposed to users trough the host
> > capabilities XML.
> >
> > *v3 major changes
> > - support LXC
> > - merge virSecurityDACSetUser and virSecurityDACSetGroup in
> >   virSecurityDACSetUserAndGroup
> > - DAC sets the baselabel in virSecurityDACSetUserAndGroup
> > - Use virDomainVirtTypeToString instead of hardcoding the name
> 
> I've ran a quick smoke test on top of the current HEAD and it seems to
> work, can someone please review it or tell me if it makes sense at all
> to have this information under "capabilities"?

Opps my bad, it was on my todo list to review this, but I totally
forgot. Will do it now.

Daniel
-- 
|: http://berrange.com      -o-    http://www.flickr.com/photos/dberrange/ :|
|: http://libvirt.org              -o-             http://virt-manager.org :|
|: http://autobuild.org       -o-         http://search.cpan.org/~danberr/ :|
|: http://entangle-photo.org       -o-       http://live.gnome.org/gtk-vnc :|




More information about the libvir-list mailing list