]> git.ipfire.org Git - thirdparty/libvirt.git/commit
Don't try to add non-existant devices to ACL
authorDaniel P. Berrange <berrange@redhat.com>
Wed, 27 Feb 2013 16:57:16 +0000 (16:57 +0000)
committerDaniel P. Berrange <berrange@redhat.com>
Wed, 27 Feb 2013 22:51:24 +0000 (22:51 +0000)
commit7f544a4c8f0353e4ff9ca08aafbb86ff8f60da0a
tree18411a4f616c1c463eec5fea00f5cea969ec1d9d
parentd0b3ee55ec377553def06c3d53ba8a576096e51d
Don't try to add non-existant devices to ACL

The QEMU driver has a list of devices nodes that are whitelisted
for all guests. The kernel has recently started returning an
error if you try to whitelist a device which does not exist.
This causes a warning in libvirt logs and an audit error for
any missing devices. eg

2013-02-27 16:08:26.515+0000: 29625: warning : virDomainAuditCgroup:451 : success=no virt=kvm resrc=cgroup reason=allow vm="vm031714" uuid=9d8f1de0-44f4-a0b1-7d50-e41ee6cd897b cgroup="/sys/fs/cgroup/devices/libvirt/qemu/vm031714/" class=path path=/dev/kqemu rdev=? acl=rw

Signed-off-by: Daniel P. Berrange <berrange@redhat.com>
src/qemu/qemu_cgroup.c