Re: [libvirt] [PATCH v3 22/28] security_manager: Introduce metadata locking APIs

2018-08-31 Thread John Ferlan
On 08/27/2018 04:08 AM, Michal Privoznik wrote: > Expose two APIs to lock and unlock metadata for given path. As > the comment from the header file says, this is somewhat > cumbersome, but it does not seem there is a better way. > > The idea is that a security driver (like DAC or SELinux) will

[libvirt] [PATCH v3 22/28] security_manager: Introduce metadata locking APIs

2018-08-27 Thread Michal Privoznik
Expose two APIs to lock and unlock metadata for given path. As the comment from the header file says, this is somewhat cumbersome, but it does not seem there is a better way. The idea is that a security driver (like DAC or SELinux) will call virSecurityManagerMetadataLock() just before they are ab