[libvirt] [PATCH] security: Do not restore labels on device tree binary

Daniel P. Berrange berrange at redhat.com
Fri Jan 15 15:51:16 UTC 2016


On Fri, Jan 15, 2016 at 04:42:19PM +0100, Jiri Denemark wrote:
> A device tree binary file specified by /domain/os/dtb element is a
> read-only resource similar to kernel and initrd files. We shouldn't
> restore its label when destroying a domain to avoid breaking other
> domains configure with the same device tree.
> 
> Signed-off-by: Jiri Denemark <jdenemar at redhat.com>

ACK


Regards,
Daniel
-- 
|: http://berrange.com      -o-    http://www.flickr.com/photos/dberrange/ :|
|: http://libvirt.org              -o-             http://virt-manager.org :|
|: http://autobuild.org       -o-         http://search.cpan.org/~danberr/ :|
|: http://entangle-photo.org       -o-       http://live.gnome.org/gtk-vnc :|




More information about the libvir-list mailing list