Re: [libvirt] [PATCH 2/2] Ensure root filesystem is recursively mounted readonly

2013-09-11 Thread Eric Blake
On 09/10/2013 06:46 AM, Daniel P. Berrange wrote: > From: "Daniel P. Berrange" > > If the guest is configured with > > > > > > > > Then any submounts under / should also end up readonly, except > for those setup as basic mounts. eg if the user has /home on a > sep

Re: [libvirt] [PATCH 2/2] Ensure root filesystem is recursively mounted readonly

2013-09-11 Thread Gao feng
On 09/10/2013 08:46 PM, Daniel P. Berrange wrote: > From: "Daniel P. Berrange" > > If the guest is configured with > > > > > > > > Then any submounts under / should also end up readonly, except > for those setup as basic mounts. eg if the user has /home on a > sep

[libvirt] [PATCH 2/2] Ensure root filesystem is recursively mounted readonly

2013-09-10 Thread Daniel P. Berrange
From: "Daniel P. Berrange" If the guest is configured with Then any submounts under / should also end up readonly, except for those setup as basic mounts. eg if the user has /home on a separate volume, they'd expect /home to be readonly, but we should not touch th