[libvirt] [PATCH] security: Do not restore labels on device tree binary
Daniel P. Berrange
berrange at redhat.com
Fri Jan 15 15:51:16 UTC 2016
On Fri, Jan 15, 2016 at 04:42:19PM +0100, Jiri Denemark wrote:
> A device tree binary file specified by /domain/os/dtb element is a
> read-only resource similar to kernel and initrd files. We shouldn't
> restore its label when destroying a domain to avoid breaking other
> domains configure with the same device tree.
>
> Signed-off-by: Jiri Denemark <jdenemar at redhat.com>
ACK
Regards,
Daniel
--
|: http://berrange.com -o- http://www.flickr.com/photos/dberrange/ :|
|: http://libvirt.org -o- http://virt-manager.org :|
|: http://autobuild.org -o- http://search.cpan.org/~danberr/ :|
|: http://entangle-photo.org -o- http://live.gnome.org/gtk-vnc :|
More information about the libvir-list
mailing list