On Wed, Sep 10, 2014 at 03:26:06PM +0200, Michal Privoznik wrote: > I know I've sent several versions like ages ago, so this should > not start with v1, but hey, this is completely new approach, so > I'm gonna start from 1. > > Here, the virtlockd is misused to hold the original seclabels > (although only DAC label is implemented so far). Even more, it > does a reference counting, so that only the last label restore > does the job, not the previous ones. Ah interesting approach. Do you have a pointer to your most recent posting of the previous approach for comparison. I remember seeing it before, but I'm being unlucky finding it in the archives right now. Regards, Daniel -- |: http://berrange.com -o- http://www.flickr.com/photos/dberrange/ :| |: http://libvirt.org -o- http://virt-manager.org :| |: http://autobuild.org -o- http://search.cpan.org/~danberr/ :| |: http://entangle-photo.org -o- http://live.gnome.org/gtk-vnc :| -- libvir-list mailing list libvir-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/libvir-list