Re: [Qemu-devel] [PATCH] Add support for fd: protocol

2011-05-24 Thread Jamie Lokier
Stefan Hajnoczi wrote: > On Mon, May 23, 2011 at 11:49 PM, Jamie Lokier wrote: > > Being able to override the backing file path would be useful anyway. > > > > I've already had problems when moving established qcow2 files between > > systems, that for historical reasons contain either an absolute

Re: [Qemu-devel] [PATCH] Add support for fd: protocol

2011-05-24 Thread Stefan Hajnoczi
On Mon, May 23, 2011 at 11:49 PM, Jamie Lokier wrote: > Markus Armbruster wrote: >> Anthony Liguori writes: >> >> > On 05/23/2011 05:30 AM, Daniel P. Berrange wrote: >> >> It feels to me that turning the current block driver code which just does >> >> open(2) on files, into something which issues

Re: [Qemu-devel] [PATCH] Add support for fd: protocol

2011-05-23 Thread Jamie Lokier
Markus Armbruster wrote: > Anthony Liguori writes: > > > On 05/23/2011 05:30 AM, Daniel P. Berrange wrote: > >> It feels to me that turning the current block driver code which just does > >> open(2) on files, into something which issues events& asynchronously > >> waits for a file would potentia

Re: [Qemu-devel] [PATCH] Add support for fd: protocol

2011-05-23 Thread Anthony Liguori
On 05/23/2011 10:56 AM, Kevin Wolf wrote: Am 23.05.2011 17:24, schrieb Markus Armbruster: Kevin Wolf writes: An fd: protocol can't easily support reopen. So fail it. This doesn't break any existing usage. It's just a restriction on the new protocol. Restrictions can render the new protocol

Re: [Qemu-devel] [PATCH] Add support for fd: protocol

2011-05-23 Thread Blue Swirl
On Mon, May 23, 2011 at 6:56 PM, Kevin Wolf wrote: > Am 23.05.2011 17:24, schrieb Markus Armbruster: >> Kevin Wolf writes: >> >>> Am 20.05.2011 21:53, schrieb Blue Swirl: On Fri, May 20, 2011 at 10:42 PM, Anthony Liguori wrote: > On 05/20/2011 02:25 PM, Blue Swirl wrote: >> >>

Re: [Qemu-devel] [PATCH] Add support for fd: protocol

2011-05-23 Thread Corey Bryant
On 05/23/2011 11:24 AM, Markus Armbruster wrote: Kevin Wolf writes: Am 20.05.2011 21:53, schrieb Blue Swirl: On Fri, May 20, 2011 at 10:42 PM, Anthony Liguori wrote: On 05/20/2011 02:25 PM, Blue Swirl wrote: On Fri, May 20, 2011 at 9:48 PM, Corey Bryant wrote: sVirt provides SELinux

Re: [Qemu-devel] [PATCH] Add support for fd: protocol

2011-05-23 Thread Kevin Wolf
Am 23.05.2011 17:24, schrieb Markus Armbruster: > Kevin Wolf writes: > >> Am 20.05.2011 21:53, schrieb Blue Swirl: >>> On Fri, May 20, 2011 at 10:42 PM, Anthony Liguori >>> wrote: On 05/20/2011 02:25 PM, Blue Swirl wrote: > > On Fri, May 20, 2011 at 9:48 PM, Corey Bryant wrote: >>

Re: [Qemu-devel] [PATCH] Add support for fd: protocol

2011-05-23 Thread Markus Armbruster
Kevin Wolf writes: > Am 20.05.2011 21:53, schrieb Blue Swirl: >> On Fri, May 20, 2011 at 10:42 PM, Anthony Liguori >> wrote: >>> On 05/20/2011 02:25 PM, Blue Swirl wrote: On Fri, May 20, 2011 at 9:48 PM, Corey Bryant wrote: > > sVirt provides SELinux MAC isolation for Qemu gu

Re: [Qemu-devel] [PATCH] Add support for fd: protocol

2011-05-23 Thread Markus Armbruster
Anthony Liguori writes: > On 05/23/2011 05:30 AM, Daniel P. Berrange wrote: >> It feels to me that turning the current block driver code which just does >> open(2) on files, into something which issues events& asynchronously >> waits for a file would potentially be quite complex. >> >> You also

Re: [Qemu-devel] [PATCH] Add support for fd: protocol

2011-05-23 Thread Kevin Wolf
Am 20.05.2011 21:53, schrieb Blue Swirl: > On Fri, May 20, 2011 at 10:42 PM, Anthony Liguori > wrote: >> On 05/20/2011 02:25 PM, Blue Swirl wrote: >>> >>> On Fri, May 20, 2011 at 9:48 PM, Corey Bryant wrote: sVirt provides SELinux MAC isolation for Qemu guest processes and their c

Re: [Qemu-devel] [PATCH] Add support for fd: protocol

2011-05-23 Thread Daniel P. Berrange
On Mon, May 23, 2011 at 02:26:05PM +0100, Stefan Hajnoczi wrote: > On Mon, May 23, 2011 at 2:21 PM, Anthony Liguori wrote: > > On 05/23/2011 08:09 AM, Stefan Hajnoczi wrote: > >> > >> On Mon, May 23, 2011 at 1:50 PM, Anthony Liguori > >>  wrote: > >>> > >>> On 05/23/2011 04:45 AM, Daniel P. Berran

Re: [Qemu-devel] [PATCH] Add support for fd: protocol

2011-05-23 Thread Stefan Hajnoczi
On Mon, May 23, 2011 at 2:21 PM, Anthony Liguori wrote: > On 05/23/2011 08:09 AM, Stefan Hajnoczi wrote: >> >> On Mon, May 23, 2011 at 1:50 PM, Anthony Liguori >>  wrote: >>> >>> On 05/23/2011 04:45 AM, Daniel P. Berrange wrote: On Fri, May 20, 2011 at 02:48:23PM -0400, Corey Bryant wrot

Re: [Qemu-devel] [PATCH] Add support for fd: protocol

2011-05-23 Thread Anthony Liguori
On 05/23/2011 08:09 AM, Stefan Hajnoczi wrote: On Mon, May 23, 2011 at 1:50 PM, Anthony Liguori wrote: On 05/23/2011 04:45 AM, Daniel P. Berrange wrote: On Fri, May 20, 2011 at 02:48:23PM -0400, Corey Bryant wrote: sVirt provides SELinux MAC isolation for Qemu guest processes and their corr

Re: [Qemu-devel] [PATCH] Add support for fd: protocol

2011-05-23 Thread Stefan Hajnoczi
On Mon, May 23, 2011 at 1:50 PM, Anthony Liguori wrote: > On 05/23/2011 04:45 AM, Daniel P. Berrange wrote: >> >> On Fri, May 20, 2011 at 02:48:23PM -0400, Corey Bryant wrote: >>> >>> sVirt provides SELinux MAC isolation for Qemu guest processes and their >>> corresponding resources (image files).

Re: [Qemu-devel] [PATCH] Add support for fd: protocol

2011-05-23 Thread Daniel P. Berrange
On Mon, May 23, 2011 at 07:50:12AM -0500, Anthony Liguori wrote: > On 05/23/2011 04:45 AM, Daniel P. Berrange wrote: > >On Fri, May 20, 2011 at 02:48:23PM -0400, Corey Bryant wrote: > >>sVirt provides SELinux MAC isolation for Qemu guest processes and their > >>corresponding resources (image files)

Re: [Qemu-devel] [PATCH] Add support for fd: protocol

2011-05-23 Thread Anthony Liguori
On 05/23/2011 05:30 AM, Daniel P. Berrange wrote: It feels to me that turning the current block driver code which just does open(2) on files, into something which issues events& asynchronously waits for a file would potentially be quite complex. You also need to be much more careful from a secu

Re: [Qemu-devel] [PATCH] Add support for fd: protocol

2011-05-23 Thread Anthony Liguori
On 05/23/2011 04:45 AM, Daniel P. Berrange wrote: On Fri, May 20, 2011 at 02:48:23PM -0400, Corey Bryant wrote: sVirt provides SELinux MAC isolation for Qemu guest processes and their corresponding resources (image files). sVirt provides this support by labeling guests and resources with securit

Re: [Qemu-devel] [PATCH] Add support for fd: protocol

2011-05-23 Thread Daniel P. Berrange
On Mon, May 23, 2011 at 11:19:15AM +0100, Stefan Hajnoczi wrote: > On Mon, May 23, 2011 at 10:45 AM, Daniel P. Berrange > wrote: > > On Fri, May 20, 2011 at 02:48:23PM -0400, Corey Bryant wrote: > >> sVirt provides SELinux MAC isolation for Qemu guest processes and their > >> corresponding resourc

Re: [Qemu-devel] [PATCH] Add support for fd: protocol

2011-05-23 Thread Stefan Hajnoczi
On Mon, May 23, 2011 at 10:45 AM, Daniel P. Berrange wrote: > On Fri, May 20, 2011 at 02:48:23PM -0400, Corey Bryant wrote: >> sVirt provides SELinux MAC isolation for Qemu guest processes and their >> corresponding resources (image files). sVirt provides this support >> by labeling guests and res

Re: [Qemu-devel] [PATCH] Add support for fd: protocol

2011-05-23 Thread Daniel P. Berrange
On Fri, May 20, 2011 at 02:48:23PM -0400, Corey Bryant wrote: > sVirt provides SELinux MAC isolation for Qemu guest processes and their > corresponding resources (image files). sVirt provides this support > by labeling guests and resources with security labels that are stored > in file system exten

Re: [Qemu-devel] [PATCH] Add support for fd: protocol

2011-05-23 Thread Daniel P. Berrange
On Fri, May 20, 2011 at 02:48:23PM -0400, Corey Bryant wrote: > sVirt provides SELinux MAC isolation for Qemu guest processes and their > corresponding resources (image files). sVirt provides this support > by labeling guests and resources with security labels that are stored > in file system exten

Re: [Qemu-devel] [PATCH] Add support for fd: protocol

2011-05-20 Thread Blue Swirl
On Fri, May 20, 2011 at 10:42 PM, Anthony Liguori wrote: > On 05/20/2011 02:25 PM, Blue Swirl wrote: >> >> On Fri, May 20, 2011 at 9:48 PM, Corey Bryant  wrote: >>> >>> sVirt provides SELinux MAC isolation for Qemu guest processes and their >>> corresponding resources (image files). sVirt provides

Re: [Qemu-devel] [PATCH] Add support for fd: protocol

2011-05-20 Thread Anthony Liguori
On 05/20/2011 02:25 PM, Blue Swirl wrote: On Fri, May 20, 2011 at 9:48 PM, Corey Bryant wrote: sVirt provides SELinux MAC isolation for Qemu guest processes and their corresponding resources (image files). sVirt provides this support by labeling guests and resources with security labels that ar

Re: [Qemu-devel] [PATCH] Add support for fd: protocol

2011-05-20 Thread Blue Swirl
On Fri, May 20, 2011 at 9:48 PM, Corey Bryant wrote: > sVirt provides SELinux MAC isolation for Qemu guest processes and their > corresponding resources (image files). sVirt provides this support > by labeling guests and resources with security labels that are stored > in file system extended attr

Re: [Qemu-devel] [PATCH] Add support for fd: protocol

2011-05-20 Thread Anthony Liguori
On 05/20/2011 01:48 PM, Corey Bryant wrote: sVirt provides SELinux MAC isolation for Qemu guest processes and their corresponding resources (image files). sVirt provides this support by labeling guests and resources with security labels that are stored in file system extended attributes. Some fil

[Qemu-devel] [PATCH] Add support for fd: protocol

2011-05-20 Thread Corey Bryant
sVirt provides SELinux MAC isolation for Qemu guest processes and their corresponding resources (image files). sVirt provides this support by labeling guests and resources with security labels that are stored in file system extended attributes. Some file systems, such as NFS, do not support the ext