11 Feb
2019
11 Feb
'19
9:21 p.m.
On 2/6/19 2:18 PM, Eric Blake wrote:
Creating a checkpoint does not modify guest-visible state, but does modify host resources. Rather than reuse existing domain:write, domain:block_write, or domain:snapshot access controls, it seems better to introduce a new access control specific to tasks related to checkpoints and incremental backups of guest disk state.
Signed-off-by: Eric Blake <eblake@redhat.com> --- src/access/viraccessperm.h | 8 +++++++- src/access/viraccessperm.c | 5 +++-- 2 files changed, 10 insertions(+), 3 deletions(-)
Seems reasonable, famous last words though ;-) Reviewed-by: John Ferlan <jferlan@redhat.com> John