[libvirt] [PATCH v3 11/15] vircgroup: introduce virCgroupV2DenyDevice

[Ján Tomko]

On Thu, Apr 25, 2019 at 09:44:28AM +0200, Pavel Hrdina wrote:
>In order to deny device we need to check if there is any entry in BPF
>map and we need to load the current value from map if there is already
>entry for that device.  If both values are same we can remove that entry
>but if they are different we need to update the entry because we don't
>have to deny all access, but for example only write access.
>
>Signed-off-by: Pavel Hrdina <phrdina at redhat.com>
>---
> src/util/vircgroupv2.c | 41 +++++++++++++++++++++++++++++++++++++++++
> 1 file changed, 41 insertions(+)
>

Reviewed-by: Ján Tomko <jtomko at redhat.com>

Jano
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/libvir-list/attachments/20190618/9a4f2d68/attachment-0001.sig>