[libvirt] [PATCH 2/2] security: Implement virSecurityManagerSetHugepages

Michal Privoznik mprivozn at redhat.com
Tue Nov 22 12:45:43 UTC 2016


Since its introduction in 2012 this internal API did nothing. Now
it's finally the right time to put it into a good use. It's
implementation is fairly simple and exactly the same as
virSecurityDomainSetPathLabel.

Signed-off-by: Michal Privoznik <mprivozn at redhat.com>
---
 src/security/security_dac.c     | 11 +++++++++++
 src/security/security_selinux.c | 10 ++++++++++
 2 files changed, 21 insertions(+)

diff --git a/src/security/security_dac.c b/src/security/security_dac.c
index fd74e8b..3fa9df9 100644
--- a/src/security/security_dac.c
+++ b/src/security/security_dac.c
@@ -1564,6 +1564,15 @@ virSecurityDACDomainSetPathLabel(virSecurityManagerPtr mgr,
     return virSecurityDACSetOwnership(priv, NULL, path, user, group);
 }
 
+static int
+virSecurityDACDomainSetHugepages(virSecurityManagerPtr mgr,
+                                 virDomainDefPtr def,
+                                 const char *path)
+{
+    return virSecurityDACDomainSetPathLabel(mgr, def, path);
+}
+
+
 virSecurityDriver virSecurityDriverDAC = {
     .privateDataLen                     = sizeof(virSecurityDACData),
     .name                               = SECURITY_DAC_NAME,
@@ -1613,4 +1622,6 @@ virSecurityDriver virSecurityDriverDAC = {
     .getBaseLabel                       = virSecurityDACGetBaseLabel,
 
     .domainSetPathLabel                 = virSecurityDACDomainSetPathLabel,
+
+    .domainSetSecurityHugepages         = virSecurityDACDomainSetHugepages,
 };
diff --git a/src/security/security_selinux.c b/src/security/security_selinux.c
index 89c93dc..0497acc 100644
--- a/src/security/security_selinux.c
+++ b/src/security/security_selinux.c
@@ -2610,6 +2610,14 @@ virSecuritySELinuxDomainSetPathLabel(virSecurityManagerPtr mgr,
     return virSecuritySELinuxSetFilecon(mgr, path, seclabel->imagelabel);
 }
 
+static int
+virSecuritySELinuxDomainSetHugepages(virSecurityManagerPtr mgr,
+                                     virDomainDefPtr def,
+                                     const char *path)
+{
+    return virSecuritySELinuxDomainSetPathLabel(mgr, def, path);
+}
+
 virSecurityDriver virSecurityDriverSELinux = {
     .privateDataLen                     = sizeof(virSecuritySELinuxData),
     .name                               = SECURITY_SELINUX_NAME,
@@ -2656,4 +2664,6 @@ virSecurityDriver virSecurityDriverSELinux = {
     .getBaseLabel                       = virSecuritySELinuxGetBaseLabel,
 
     .domainSetPathLabel                 = virSecuritySELinuxDomainSetPathLabel,
+
+    .domainSetSecurityHugepages         = virSecuritySELinuxDomainSetHugepages,
 };
-- 
2.8.4




More information about the libvir-list mailing list