On 3/28/19 11:04 AM, Michal Privoznik wrote:
> The way that virSecurityDACRecallLabel is currently written is
> that if XATTRs are not supported for given path to the caller
> this is not different than if the path is still in use. The value
> of 1 is returned which makes secdrivers skip label
The way that virSecurityDACRecallLabel is currently written is
that if XATTRs are not supported for given path to the caller
this is not different than if the path is still in use. The value
of 1 is returned which makes secdrivers skip label restore.
This is clearly a bug as we are not restoring