Re: [libvirt] [PATCH 10/15] security: add new virSecurityManagerSetChildProcessLabel API

2013-02-08 Thread Daniel P. Berrange
On Thu, Feb 07, 2013 at 04:37:51PM -0500, Laine Stump wrote: > The existing virSecurityManagerSetProcessLabel() API is designed so > that it must be called after forking the child process, but before > exec'ing the child. Due to the way the virCommand API works, that > means it needs to be put in a

[libvirt] [PATCH 10/15] security: add new virSecurityManagerSetChildProcessLabel API

2013-02-07 Thread Laine Stump
The existing virSecurityManagerSetProcessLabel() API is designed so that it must be called after forking the child process, but before exec'ing the child. Due to the way the virCommand API works, that means it needs to be put in a "hook" function that virCommand is told to call out to at that time.