Re: [libvirt] [PATCH] security: fix deadlock with prefork

2013-07-19 Thread Daniel P. Berrange
On Fri, Jul 19, 2013 at 09:09:40AM -0600, Eric Blake wrote: Attempts to start a domain with both SELinux and DAC security modules loaded will deadlock; latent problem introduced in commit fdb3bde and exposed in commit 29fe5d7. Basically, when recursing into the security manager for other

Re: [libvirt] [PATCH] security: fix deadlock with prefork

2013-07-19 Thread Eric Blake
On 07/19/2013 09:11 AM, Daniel P. Berrange wrote: On Fri, Jul 19, 2013 at 09:09:40AM -0600, Eric Blake wrote: Attempts to start a domain with both SELinux and DAC security modules loaded will deadlock; latent problem introduced in commit fdb3bde and exposed in commit 29fe5d7. Basically, when

[libvirt] [PATCH] security: fix deadlock with prefork

2013-07-19 Thread Eric Blake
Attempts to start a domain with both SELinux and DAC security modules loaded will deadlock; latent problem introduced in commit fdb3bde and exposed in commit 29fe5d7. Basically, when recursing into the security manager for other driver's prefork, we have to undo the asymmetric lock taken at the