Re: [PATCHv2 0/2] lxc/dac: avoid getgrouplist between fork/exec

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 18.07.2013 01:08, Eric Blake wrote:
> v1 was here:
> https://www.redhat.com/archives/libvir-list/2013-July/msg00853.html
> 
> Changes since then: split into two patches, and delay supplemental
> group computation until just before forking
> 
> Eric Blake (2):
>   security: framework for driver PreFork handler
>   security_dac: compute supplemental groups before fork
> 
>  src/qemu/qemu_process.c         |  3 +-
>  src/security/security_dac.c     | 63 ++++++++++++++++++++++++++++-------------
>  src/security/security_driver.h  |  4 +++
>  src/security/security_manager.c | 16 +++++++++--
>  src/security/security_manager.h |  2 +-
>  src/security/security_stack.c   | 23 +++++++++++++++
>  6 files changed, 88 insertions(+), 23 deletions(-)
> 

ACK series, but see the issue I'm raising in 2/2.

Michal

--
libvir-list mailing list
libvir-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/libvir-list




[Index of Archives]     [Virt Tools]     [Libvirt Users]     [Lib OS Info]     [Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Big List of Linux Books]     [Yosemite News]     [KDE Users]     [Fedora Tools]