Re: [libvirt] [PATCH 3/4] security: Introduce method for labeling file descriptors of created files

2013-07-02 Thread Daniel P. Berrange
On Mon, Jul 01, 2013 at 02:28:46PM +0200, Peter Krempa wrote: > On 06/27/13 20:51, Daniel P. Berrange wrote: > >On Wed, Jun 26, 2013 at 03:01:49PM +0200, Peter Krempa wrote: > >>The method labels the file descriptor even if dynamic labeling/relabeling > >>is turned off. This is needed for files cre

Re: [libvirt] [PATCH 3/4] security: Introduce method for labeling file descriptors of created files

2013-07-01 Thread Peter Krempa
On 06/27/13 20:51, Daniel P. Berrange wrote: On Wed, Jun 26, 2013 at 03:01:49PM +0200, Peter Krempa wrote: The method labels the file descriptor even if dynamic labeling/relabeling is turned off. This is needed for files created by libvirt and then passed along to qemu as a FD. --- src/libvirt

Re: [libvirt] [PATCH 3/4] security: Introduce method for labeling file descriptors of created files

2013-06-27 Thread Daniel P. Berrange
On Wed, Jun 26, 2013 at 03:01:49PM +0200, Peter Krempa wrote: > The method labels the file descriptor even if dynamic labeling/relabeling > is turned off. This is needed for files created by libvirt and then > passed along to qemu as a FD. > --- > src/libvirt_private.syms| 1 + > src/secu

[libvirt] [PATCH 3/4] security: Introduce method for labeling file descriptors of created files

2013-06-26 Thread Peter Krempa
The method labels the file descriptor even if dynamic labeling/relabeling is turned off. This is needed for files created by libvirt and then passed along to qemu as a FD. --- src/libvirt_private.syms| 1 + src/security/security_dac.c | 9 + src/security/security_driver.h |