Re: [libvirt] [PATCH 8/n] selinux: avoid memory overhead of matchpathcon

2010-12-14 Thread Eric Blake
On 11/30/2010 08:54 PM, Eric Blake wrote: > * src/security/security_selinux.c > (SELinuxRestoreSecurityFileLabel): Use selabel_lookup instead of > matchpathcon. > Suggested by Daniel Walsh. > --- > > #include > #include > +#include > #include > #include > #include Phooey. This breaks

Re: [libvirt] [PATCH 8/n] selinux: avoid memory overhead of matchpathcon

2010-12-13 Thread Eric Blake
On 12/13/2010 04:01 PM, Matthias Bolte wrote: > 2010/12/1 Eric Blake : >> * src/security/security_selinux.c >> (SELinuxRestoreSecurityFileLabel): Use selabel_lookup instead of >> matchpathcon. >> Suggested by Daniel Walsh. >> --- > > ACK. Thanks; pushed. -- Eric Blake ebl...@redhat.com+1-

Re: [libvirt] [PATCH 8/n] selinux: avoid memory overhead of matchpathcon

2010-12-13 Thread Matthias Bolte
2010/12/1 Eric Blake : > * src/security/security_selinux.c > (SELinuxRestoreSecurityFileLabel): Use selabel_lookup instead of > matchpathcon. > Suggested by Daniel Walsh. > --- > > Makes the huge difference that I originally thought I'd get with patch > 5/n earlier in the series.  Beforehand, when

Re: [libvirt] [PATCH 8/n] selinux: avoid memory overhead of matchpathcon

2010-11-30 Thread Eric Blake
On 11/30/2010 08:54 PM, Eric Blake wrote: > * src/security/security_selinux.c > (SELinuxRestoreSecurityFileLabel): Use selabel_lookup instead of > matchpathcon. > Suggested by Daniel Walsh. https://bugzilla.redhat.com/show_bug.cgi?id=658657 > @@ -380,14 +382,16 @@ SELinuxRestoreSecurityFileLabel(

[libvirt] [PATCH 8/n] selinux: avoid memory overhead of matchpathcon

2010-11-30 Thread Eric Blake
* src/security/security_selinux.c (SELinuxRestoreSecurityFileLabel): Use selabel_lookup instead of matchpathcon. Suggested by Daniel Walsh. --- Makes the huge difference that I originally thought I'd get with patch 5/n earlier in the series. Beforehand, when trying to start a single kvm guest the