]> xenbits.xensource.com Git - libvirt.git/commit
security: Driver 'none' cannot create confined guests
authorJiri Denemark <jdenemar@redhat.com>
Tue, 7 Feb 2012 18:54:59 +0000 (19:54 +0100)
committerJiri Denemark <jdenemar@redhat.com>
Wed, 8 Feb 2012 10:55:56 +0000 (11:55 +0100)
commitafb96301f37d50a5734e7f9678f67dafe5c19a58
tree09893f7f8f12d312e89a945ad5934dc3e8b73495
parentf6957617c55ba7d5e6ca672b6d86f4352fd0119f
security: Driver 'none' cannot create confined guests

In case the caller specifies that confined guests are required but the
security driver turns out to be 'none', we should return an error since
this driver clearly cannot meet that requirement.  As a result of this
error, libvirtd fails to start when the host admin explicitly sets
confined guests are required but there is no security driver available.

Since security driver 'none' cannot create confined guests, we override
default confined setting so that hypervisor drivers do not thing they
should create confined guests.
src/security/security_manager.c
tests/seclabeltest.c