]> xenbits.xensource.com Git - libvirt.git/commit
security: introduce virSecurityManagerCheckAllLabel function
authorErik Skultety <eskultet@redhat.com>
Thu, 12 Feb 2015 17:32:40 +0000 (18:32 +0100)
committerJán Tomko <jtomko@redhat.com>
Fri, 13 Feb 2015 13:37:54 +0000 (14:37 +0100)
commitc3d9d3bbc99b6694b713f6de4198e285ba944f03
treeeb4450d7ef1ede80f2426a5753d46fcdb45d2b7b
parent6ba5d1afecc091d856906cd2e2b5ec8350fefa77
security: introduce virSecurityManagerCheckAllLabel function

We do have a check for valid per-domain security model, however we still
do permit an invalid security model for a domain's device (those which
are specified with <source> element).
This patch introduces a new function virSecurityManagerCheckAllLabel
which compares user specified security model against currently
registered security drivers. That being said, it also permits 'none'
being specified as a device security model.

Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1165485
Signed-off-by: Ján Tomko <jtomko@redhat.com>
src/libvirt_private.syms
src/lxc/lxc_process.c
src/qemu/qemu_process.c
src/security/security_manager.c
src/security/security_manager.h