Re: [libvirt] [PATCH] security: Don't increase XATTRs refcounter on failure

2019-08-22 Thread Martin Kletzander
On Thu, Aug 22, 2019 at 02:30:30PM +0200, Michal Privoznik wrote: If user has two domains, each have the same disk (configured for RW) but each runs with different seclabel then we deny start of the second domain because in order to do that we would need to relabel the disk but that would cut the

[libvirt] [PATCH] security: Don't increase XATTRs refcounter on failure

2019-08-22 Thread Michal Privoznik
If user has two domains, each have the same disk (configured for RW) but each runs with different seclabel then we deny start of the second domain because in order to do that we would need to relabel the disk but that would cut the first domain off. Even if we did not do that, qemu would fail to st