NEWS: Mention new SecurityManager APIs for labeling network devices

Signed-off-by: Jim Fehlig <jfehlig@suse.com>
Reviewed-by: Andrea Bolognani <abologna@redhat.com>

diff --git a/NEWS.rst b/NEWS.rst
index b9edb7dc68cd6dae38638aca100591a8c1abe315..00e68f87e2176f5366e955226267205a4df796a7 100644 (file)
--- a/NEWS.rst
+++ b/NEWS.rst
@@ -33,6 +33,13 @@ v7.7.0 (unreleased)
     * Add flag ``VIR_INTERFACE_DEFINE_VALIDATE`` to validate interface input xml.
       For virsh, users can use it as ``iface-define --validate``.
 
+  * Add SecurityManager APIs for labeling network devices
+
+    New ``virSecurityManagerSetNetdevLabel`` and ``virSecurityManagerSetNetdevLabel``
+    APIs are introduced and implemented in the Apparmor security driver.
+    The qemu driver uses the APIs to label vhostuser ports on hotplug and
+    restore labeling on unplug.
+
 * **Bug fixes**