Re: [libvirt] [PATCH 2/2] apparmor: don't fail on non-apparmor

2017-02-15 Thread Jim Fehlig
Michal Privoznik wrote: > On 02/03/2017 06:32 PM, Jim Fehlig wrote: >> If the apparmor security driver is loaded/enabled and domain config >> contains a element whose type attribute is not 'apparmor', >> starting the domain fails when attempting to label resources such >> as tap FDs. >> >> Many

Re: [libvirt] [PATCH 2/2] apparmor: don't fail on non-apparmor

2017-02-14 Thread Michal Privoznik
On 02/03/2017 06:32 PM, Jim Fehlig wrote: > If the apparmor security driver is loaded/enabled and domain config > contains a element whose type attribute is not 'apparmor', > starting the domain fails when attempting to label resources such > as tap FDs. > > Many of the apparmor driver entry

Re: [libvirt] [PATCH 2/2] apparmor: don't fail on non-apparmor

2017-02-11 Thread Guido Günther
Hi, Jim, On Thu, Feb 09, 2017 at 09:30:16AM -0700, Jim Fehlig wrote: > Guido Günther wrote: > > On Fri, Feb 03, 2017 at 10:32:12AM -0700, Jim Fehlig wrote: > >> If the apparmor security driver is loaded/enabled and domain config > >> contains a element whose type attribute is not 'apparmor', > >>

Re: [libvirt] [PATCH 2/2] apparmor: don't fail on non-apparmor

2017-02-09 Thread Jim Fehlig
Guido Günther wrote: > On Fri, Feb 03, 2017 at 10:32:12AM -0700, Jim Fehlig wrote: >> If the apparmor security driver is loaded/enabled and domain config >> contains a element whose type attribute is not 'apparmor', >> starting the domain fails when attempting to label resources such >> as tap

Re: [libvirt] [PATCH 2/2] apparmor: don't fail on non-apparmor

2017-02-09 Thread Guido Günther
On Fri, Feb 03, 2017 at 10:32:12AM -0700, Jim Fehlig wrote: > If the apparmor security driver is loaded/enabled and domain config > contains a element whose type attribute is not 'apparmor', > starting the domain fails when attempting to label resources such > as tap FDs. > > Many of the

[libvirt] [PATCH 2/2] apparmor: don't fail on non-apparmor

2017-02-03 Thread Jim Fehlig
If the apparmor security driver is loaded/enabled and domain config contains a element whose type attribute is not 'apparmor', starting the domain fails when attempting to label resources such as tap FDs. Many of the apparmor driver entry points attempt to retrieve the apparmor security label