Re: [libvirt] [PATCH for v5.3.0 06/17] security: Don't skip label restore on file systems lacking XATTRs

2019-04-10 Thread Cole Robinson
On 3/28/19 11:04 AM, Michal Privoznik wrote: > The way that virSecurityDACRecallLabel is currently written is > that if XATTRs are not supported for given path to the caller > this is not different than if the path is still in use. The value > of 1 is returned which makes secdrivers skip label

[libvirt] [PATCH for v5.3.0 06/17] security: Don't skip label restore on file systems lacking XATTRs

2019-03-28 Thread Michal Privoznik
The way that virSecurityDACRecallLabel is currently written is that if XATTRs are not supported for given path to the caller this is not different than if the path is still in use. The value of 1 is returned which makes secdrivers skip label restore. This is clearly a bug as we are not restoring