]> git.ipfire.org Git - thirdparty/libvirt.git/commit
security: Do not restore kernel and initrd labels
authorJiri Denemark <jdenemar@redhat.com>
Fri, 15 Jan 2016 09:55:58 +0000 (10:55 +0100)
committerJiri Denemark <jdenemar@redhat.com>
Fri, 15 Jan 2016 09:55:58 +0000 (10:55 +0100)
commit68acc701bd449481e3206723c25b18fcd3d261b7
tree09c0307c5bd4529b9ad4b890a8a9d8fe0658f941
parentc1e0df918b2307b64b7c165bcf62119e628a9048
security: Do not restore kernel and initrd labels

Kernel/initrd files are essentially read-only shareable images and thus
should be handled in the same way. We already use the appropriate label
for kernel/initrd files when starting a domain, but when a domain gets
destroyed we would remove the labels which would make other running
domains using the same files very unhappy.

https://bugzilla.redhat.com/show_bug.cgi?id=921135

Signed-off-by: Jiri Denemark <jdenemar@redhat.com>
src/security/security_dac.c
src/security/security_selinux.c