Re: [libvirt] [PATCH v4 23/23] security_dac: Lock metadata when running transaction

2018-09-17 Thread John Ferlan
$SUBJ s/dac/selinux On 09/10/2018 05:36 AM, Michal Privoznik wrote: > Lock all the paths we want to relabel to mutually exclude other > libvirt daemons. > > The only culprit here hitch here is that directories can't be Where have I seen this before? > locked. Therefore, when relabeling a dir

[libvirt] [PATCH v4 23/23] security_dac: Lock metadata when running transaction

2018-09-10 Thread Michal Privoznik
Lock all the paths we want to relabel to mutually exclude other libvirt daemons. The only culprit here hitch here is that directories can't be locked. Therefore, when relabeling a directory do not lock it (this happens only when setting up some domain private paths anyway, e.g. huge pages director