Re: [libvirt] [PATCH 2/2] security: Save contexts of resources for restoring it.

Before this patch, if relabel is yes or sec_type is dynamic in VM, after VM stopped, resources this VM accessed will be restored to default label on their path, but not the label before VM started. This patch instroduce a struct named _virSecuritySELinuxBackupContext to save the path and the label before libvirt changing them. And labels will be restored to path in VM being stopped. TODO: There is only restoring for imageFile in this patch, files of other types will be implemented later. Signed-off-by: yangdongsheng <yangds.fnst(a)cn.fujitsu.com&gt; --- src/security/security_selinux.c | 229 +++++++++++++++++++++++++++++++++++++-- 1 file changed, 222 insertions(+), 7 deletions(-) diff --git a/src/security/security_selinux.c b/src/security/security_selinux.c index 6fe063e..a780569 100644 --- a/src/security/security_selinux.c +++ b/src/security/security_selinux.c @@ -57,12 +57,16 @@ typedef virSecuritySELinuxData *virSecuritySELinuxDataPtr; typedef struct _virSecuritySELinuxCallbackData virSecuritySELinuxCallbackData; typedef virSecuritySELinuxCallbackData *virSecuritySELinuxCallbackDataPtr; +typedef struct _virSecuritySELinuxBackupContext virSecuritySELinuxBackupContext; +typedef virSecuritySELinuxBackupContext *virSecuritySELinuxBackupContextPtr; + struct _virSecuritySELinuxData { char *domain_context; char *alt_domain_context; char *file_context; char *content_context; virHashTablePtr mcs; + virSecuritySELinuxBackupContextPtr backup_header;