On 08/13/2012 02:02 PM, Eric Blake wrote:
On 08/13/2012 08:08 AM, Corey Bryant wrote:
libvirt's sVirt security driver provides SELinux MAC isolation for Qemu guest processes and their corresponding image files. In other words, sVirt uses SELinux to prevent a QEMU process from opening files that do not belong to it.
Corey Bryant (7): qemu-char: Add MSG_CMSG_CLOEXEC flag to recvmsg qapi: Introduce add-fd, remove-fd, query-fdsets block: Prevent detection of /dev/fdset/ as floppy block: Convert open calls to qemu_open block: Convert close calls to qemu_close block: Enable qemu_open/close to work with fd sets monitor: Clean up fd sets on monitor disconnect
Hooray - I think we're there! Series:
Reviewed-by: Eric Blake <eblake@redhat.com>
Thanks again!! Btw, In the case that no new versions of the patches need to be submitted, how does your Reviewed-by get added? Do I need to do anything to add it? -- Regards, Corey