[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: [libvirt] [PATCH 1/1] lxc: allow fallback to no apparmor.




> -----Original Message-----
> From: libvir-list-bounces redhat com [mailto:libvir-list-bounces redhat com]
> On Behalf Of Serge Hallyn
> Sent: Saturday, September 20, 2014 12:15 AM
> To: libvir-list redhat com
> Subject: [libvirt] [PATCH 1/1] lxc: allow fallback to no apparmor.
> 
> The security_driver line in /etc/libvirt/qemu.conf is best-effort - if
> selinux is not available on the host, then 'none' will be used.
> 
> The security_driver line in /etc/libvirt/lxc.conf doesn't behave the
> same way - if apparmor is specified but policies are not available
> on the host, then container creation fails.
> 
> This patch always tries to fall back to 'none' if the requested
> driver is not available.  A better patch would allow an option list
> like qemu.conf allows, but this patch doesn't do that.
> 
> Signed-off-by: Serge Hallyn <serge hallyn ubuntu com>
> ---

Reviewed-by: Chen Hanxiao <chenhanxiao cn fujitsu com>




[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]