]> git.ipfire.org Git - thirdparty/libvirt.git/commit
security: Do not restore kernel and initrd labels
authorJiri Denemark <jdenemar@redhat.com>
Fri, 15 Jan 2016 09:55:58 +0000 (10:55 +0100)
committerCole Robinson <crobinso@redhat.com>
Thu, 21 Jan 2016 00:14:06 +0000 (19:14 -0500)
commit74909e9648366f9fc6cd7a29a71791d29f04ff7f
tree973f5b2d4d34006d4b76c63965a74040176610e3
parent40df40f35a2c9a63cb42353824691f11eed41254
security: Do not restore kernel and initrd labels

Kernel/initrd files are essentially read-only shareable images and thus
should be handled in the same way. We already use the appropriate label
for kernel/initrd files when starting a domain, but when a domain gets
destroyed we would remove the labels which would make other running
domains using the same files very unhappy.

https://bugzilla.redhat.com/show_bug.cgi?id=921135

Signed-off-by: Jiri Denemark <jdenemar@redhat.com>
(cherry picked from commit 68acc701bd449481e3206723c25b18fcd3d261b7)
src/security/security_dac.c
src/security/security_selinux.c