Re: [libvirt] [PATCH] Don't autogenerate seclabels of type 'none'

2017-08-16 Thread Jim Fehlig
On 08/16/2017 05:23 AM, Erik Skultety wrote: On Mon, Aug 14, 2017 at 06:07:10PM -0600, Jim Fehlig wrote: When security drivers are active and domain def contains no elements, there is no need to autogenerate seclabels when starting the domain, e.g. In fact, autogenerating the label can

Re: [libvirt] [PATCH] Don't autogenerate seclabels of type 'none'

2017-08-16 Thread Erik Skultety
On Mon, Aug 14, 2017 at 06:07:10PM -0600, Jim Fehlig wrote: > When security drivers are active and domain def contains > no elements, there is no need to autogenerate > seclabels when starting the domain, e.g. > > > > In fact, autogenerating the label can result in needless > save/restore and

[libvirt] [PATCH] Don't autogenerate seclabels of type 'none'

2017-08-14 Thread Jim Fehlig
When security drivers are active and domain def contains no elements, there is no need to autogenerate seclabels when starting the domain, e.g. In fact, autogenerating the label can result in needless save/restore and migration failures when the security driver is not active on the