Re: [PATCH 1/1] lxc: allow fallback to no apparmor.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




> -----Original Message-----
> From: libvir-list-bounces@xxxxxxxxxx [mailto:libvir-list-bounces@xxxxxxxxxx]
> On Behalf Of Serge Hallyn
> Sent: Saturday, September 20, 2014 12:15 AM
> To: libvir-list@xxxxxxxxxx
> Subject:  [PATCH 1/1] lxc: allow fallback to no apparmor.
> 
> The security_driver line in /etc/libvirt/qemu.conf is best-effort - if
> selinux is not available on the host, then 'none' will be used.
> 
> The security_driver line in /etc/libvirt/lxc.conf doesn't behave the
> same way - if apparmor is specified but policies are not available
> on the host, then container creation fails.
> 
> This patch always tries to fall back to 'none' if the requested
> driver is not available.  A better patch would allow an option list
> like qemu.conf allows, but this patch doesn't do that.
> 
> Signed-off-by: Serge Hallyn <serge.hallyn@xxxxxxxxxx>
> ---

Reviewed-by: Chen Hanxiao <chenhanxiao@xxxxxxxxxxxxxx>



--
libvir-list mailing list
libvir-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/libvir-list




[Index of Archives]     [Virt Tools]     [Libvirt Users]     [Lib OS Info]     [Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Big List of Linux Books]     [Yosemite News]     [KDE Users]     [Fedora Tools]