On Thu, Apr 25, 2019 at 09:44:28AM +0200, Pavel Hrdina wrote:
In order to deny device we need to check if there is any entry in BPF
map and we need to load the current value from map if there is already
entry for that device.  If both values are same we can remove that entry
but if they are different we need to update the entry because we don't
have to deny all access, but for example only write access.

Signed-off-by: Pavel Hrdina <[email protected]>
---
src/util/vircgroupv2.c | 41 +++++++++++++++++++++++++++++++++++++++++
1 file changed, 41 insertions(+)


Reviewed-by: Ján Tomko <[email protected]>

Jano

Attachment: signature.asc
Description: PGP signature

--
libvir-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/libvir-list

Reply via email to