[PATCH 0/9] Fix image labels lost after migration with shared fs

[Peng Liang]

Kindly ping.

On 8/23/2021 10:41 AM, Peng Liang wrote:
> When migrating using shared fs, the dst host will remember the image
> labels again before launching the VM and the src host will remove the
> image labels after migration.  It leads to that the image labels lost
> after migration.
> 
> Patch 7-9 are the real fix patches.
> 
> Peng Liang (9):
>   security: add virSecurityUpdateTimestampIfexists
>   security: add virSecurityManagerUpdateImageLabel
>   security: implement domainUpdateSecurityImageLabel for stack
>   security: implement domainUpdateSecurityImageLabel for DAC
>   qemu: add qemuSecurityUpdateImageLabel
>   security: rename virSecurityDACSetImageLabelInternal to
>     virSecurityDACSetImageLabelSingle
>   migration: don't remember image labels when migrating with shared fs
>   migration: don't remove image labels after migration
>   migration: update image labels in dst after migration
> 
>  src/libvirt_private.syms        |  1 +
>  src/qemu/qemu_migration.c       | 12 +++++++
>  src/qemu/qemu_process.c         |  5 ++-
>  src/qemu/qemu_security.c        | 10 ++++++
>  src/qemu/qemu_security.h        |  5 +++
>  src/security/security_dac.c     | 58 +++++++++++++++++++++++++--------
>  src/security/security_driver.h  |  5 +++
>  src/security/security_manager.c | 29 +++++++++++++++++
>  src/security/security_manager.h |  5 +++
>  src/security/security_stack.c   | 20 ++++++++++++
>  src/security/security_util.c    | 32 ++++++++++++++++++
>  src/security/security_util.h    |  4 +++
>  12 files changed, 172 insertions(+), 14 deletions(-)
> 
Thanks,
Peng