[libvirt] Resubmission #2: [PATCH 1/3] sVirt AppArmor security driver

25 Sep 2009


      On Fri, 25 Sep 2009, Jamie Strandboge wrote:
...
[PATCH 1]
patch_1_reenable-nonfile-labels.patch (Updated based on prior feedback):
When James Morris originally submitted his sVirt patches (as seen in
libvirt 0.6.1), he did not require on disk labelling for
virSecurityDomainRestoreImageLabel. A later commit[2] changed this
behavior to assume on disk labelling, which halts implementations for
path-based MAC systems such as AppArmor and TOMOYO where
vm->def->seclabel is required to obtain the label. This patch simply
adds the 'virDomainObjPtr vm' argument back to *RestoreImageLabel.
-- 
Jamie Strandboge             | http://www.canonical.com