Re: [libvirt] [PATCH 1/2] add security hook for permitting hugetlbfs access (v2)

2012-12-11 Thread Daniel P. Berrange
On Tue, Dec 11, 2012 at 08:20:29PM +, se...@hallyn.com wrote: > From: Serge Hallyn > > When a qemu domain is backed by huge pages, apparmor needs to grant the domain > rw access to files under the hugetlbfs mount point. Add a hook, called in > qemu_process.c, which ends up adding the read-wr

[libvirt] [PATCH 1/2] add security hook for permitting hugetlbfs access (v2)

2012-12-11 Thread serge
From: Serge Hallyn When a qemu domain is backed by huge pages, apparmor needs to grant the domain rw access to files under the hugetlbfs mount point. Add a hook, called in qemu_process.c, which ends up adding the read-write access through virt-aa-helper. Qemu will be creating a randomly named f