Re: [PATCH 1/2] Don't output libvirt-UUID.files for LXC apparmor profiles

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 07/11/2014 09:22 AM, Serge Hallyn wrote:
> Quoting Cédric Bosdonnat (cbosdonnat@xxxxxxxx):
>> ---
>>  src/security/virt-aa-helper.c | 3 ++-
>>  1 file changed, 2 insertions(+), 1 deletion(-)
> 
> Hi,
> 
> I'm acking this anyway bc I think you're right, but I'm trying to
> think of a case where this would still be useful.  What if we want
> to allow only a certain container to have access to its cgroups,
> for instance, for nesting containers.  Would virt-aa-helper and the
> .files be a way this would be done?  I suppose we coudl always re-introduce
> this in that case...  
> 
> Acked-by: Serge E. Hallyn <serge.hallyn@xxxxxxxxxx>

I've pushed this one.

-- 
Eric Blake   eblake redhat com    +1-919-301-3266
Libvirt virtualization library http://libvirt.org

Attachment: signature.asc
Description: OpenPGP digital signature

--
libvir-list mailing list
libvir-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/libvir-list

[Index of Archives]     [Virt Tools]     [Libvirt Users]     [Lib OS Info]     [Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Big List of Linux Books]     [Yosemite News]     [KDE Users]     [Fedora Tools]