On 01/30/2012 10:08 AM, Taku Izumi wrote:
+ /* cap_sys_rawio check */
+ if (disk->rawio == 1&&
+ (def->process_caps& (1ULL<< CAP_SYS_RAWIO)) == 0) {
+ def->process_caps |= (1ULL<< CAP_SYS_RAWIO);
+ VIR_WARN("domain %s will be granted CAP_SYS_RAWIO",
def->name);
+ }
+
This is missing tainting.
Also, I'm not sure that this code (and the tainting) would need to go
here or rather in src/qemu.
Paolo