Re: [libvirt] [PATCH 2/4] security: full path option for DomainSetPathLabel

2018-01-09 Thread Christian Ehrhardt
On Tue, Jan 9, 2018 at 11:02 AM, Michal Privoznik wrote: > On 01/03/2018 06:00 PM, Christian Ehrhardt wrote: [...] >> AppArmorSetPathLabel(virSecurityManagerPtr mgr, >> virDomainDefPtr def, >> - const char *path) >> +

Re: [libvirt] [PATCH 2/4] security: full path option for DomainSetPathLabel

2018-01-09 Thread Michal Privoznik
On 01/03/2018 06:00 PM, Christian Ehrhardt wrote: > virSecurityManagerDomainSetPathLabel is used to make a path known > to the security modules, but today is used interchangably for > - paths to files/dirs to be accessed directly > - paths to a dir, but the access will actually be to files

[libvirt] [PATCH 2/4] security: full path option for DomainSetPathLabel

2018-01-03 Thread Christian Ehrhardt
virSecurityManagerDomainSetPathLabel is used to make a path known to the security modules, but today is used interchangably for - paths to files/dirs to be accessed directly - paths to a dir, but the access will actually be to files therein Depending on the security module it is important to