[libvirt] [PATCH 2/7] Update security drivers to handle multiple security labels in internal data structures

Daniel P. Berrange berrange at redhat.com
Mon Jun 11 15:07:22 UTC 2012


On Mon, May 21, 2012 at 10:39:24AM -0300, Marcelo Cerri wrote:
> ---
>  src/security/security_apparmor.c |  112 ++++++++++----
>  src/security/security_dac.c      |  320 ++++++++++++++++++++++++++++++++++----
>  src/security/security_manager.c  |   99 +++++++++---
>  src/security/security_manager.h  |    8 +-
>  src/security/security_selinux.c  |  249 +++++++++++++++++++++---------
>  src/security/security_stack.c    |  235 +++++++++++++++++++---------
>  src/security/security_stack.h    |   13 ++
>  7 files changed, 803 insertions(+), 233 deletions(-)

This patch is really doing 2 different things at once:

 1. It updates the code to cope with def->seclabel vs def->seclabels

 2. It adds support for configurable DAC driver uid:gid labels

The first set of changes need to be merged into the previous patch so
that the 1st patch in this series actually compiles.  This patch should
then only contain the code for the DAC driver to add configurable
labels.

Daniel
-- 
|: http://berrange.com      -o-    http://www.flickr.com/photos/dberrange/ :|
|: http://libvirt.org              -o-             http://virt-manager.org :|
|: http://autobuild.org       -o-         http://search.cpan.org/~danberr/ :|
|: http://entangle-photo.org       -o-       http://live.gnome.org/gtk-vnc :|




More information about the libvir-list mailing list