[libvirt] [PATCH 1/1] lxc: allow fallback to no apparmor.

[Chen, Hanxiao]

> -----Original Message-----
> From: libvir-list-bounces at redhat.com [mailto:libvir-list-bounces at redhat.com]
> On Behalf Of Serge Hallyn
> Sent: Saturday, September 20, 2014 12:15 AM
> To: libvir-list at redhat.com
> Subject: [libvirt] [PATCH 1/1] lxc: allow fallback to no apparmor.
> 
> The security_driver line in /etc/libvirt/qemu.conf is best-effort - if
> selinux is not available on the host, then 'none' will be used.
> 
> The security_driver line in /etc/libvirt/lxc.conf doesn't behave the
> same way - if apparmor is specified but policies are not available
> on the host, then container creation fails.
> 
> This patch always tries to fall back to 'none' if the requested
> driver is not available.  A better patch would allow an option list
> like qemu.conf allows, but this patch doesn't do that.
> 
> Signed-off-by: Serge Hallyn <serge.hallyn at ubuntu.com>
> ---

Reviewed-by: Chen Hanxiao <chenhanxiao at cn.fujitsu.com>