The term "access control list" better describes the concept involved.
Reviewed-by: Peter Krempa <pkrempa@redhat.com>
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
return -1;
}
- VIR_DEBUG("Device whitelist complete");
+ VIR_DEBUG("Device ACL setup complete");
return 0;
}
# What cgroup controllers to make use of with QEMU guests
#
# - 'cpu' - use for scheduler tunables
-# - 'devices' - use for device whitelisting
+# - 'devices' - use for device access control
# - 'memory' - use for memory tunables
# - 'blkio' - use for block devices I/O tunables
# - 'cpuset' - use for CPUs and memory nodes
if (rv < 0) {
if (virLastErrorIsSystemErrno(EPERM)) {
virResetLastError();
- VIR_WARN("Group devices ACL is not accessible, disabling whitelisting");
+ VIR_WARN("Group devices ACL is not accessible, disabling filtering");
return 0;
}
return ret;
for (i = 0; tokens[i] != NULL; i++) {
- /* Whitelist the 3 top level fixed dirs
+ /* Special case the 3 top level fixed dirs
* NB i == 0 is "", since we have leading '/'
*/
if (i == 1 &&