Re: [PATCH] qemu_process: Release domain seclabel later in qemuProcessStop()

2021-01-06 Thread Daniel P . Berrangé
On Wed, Dec 09, 2020 at 11:26:52AM +0100, Michal Privoznik wrote: > Some secdrivers (typically SELinux driver) generate unique > dynamic seclabel for each domain (unless a static one is > requested in domain XML). This is achieved by calling > qemuSecurityGenLabel() from qemuProcessPrepareDomain()

Re: [PATCH] qemu_process: Release domain seclabel later in qemuProcessStop()

2021-01-06 Thread Michal Privoznik
On 12/9/20 11:26 AM, Michal Privoznik wrote: > Polite ping. Michal

[PATCH] qemu_process: Release domain seclabel later in qemuProcessStop()

2020-12-09 Thread Michal Privoznik
Some secdrivers (typically SELinux driver) generate unique dynamic seclabel for each domain (unless a static one is requested in domain XML). This is achieved by calling qemuSecurityGenLabel() from qemuProcessPrepareDomain() which allocates unique seclabel and stores it in domain def->seclabels.