Re: [libvirt] [PATCH v2 08/18] security_dac: Allow callers to enable/disable label remembering/recall

2018-12-06 Thread Daniel P . Berrangé
On Thu, Nov 29, 2018 at 02:52:23PM +0100, Michal Privoznik wrote: > Because the implementation that will be used for label > remembering/recall is not atomic we have to give callers a chance > to enable or disable it. That is, enable it if and only if > metadata locking is enabled. Otherwise the

[libvirt] [PATCH v2 08/18] security_dac: Allow callers to enable/disable label remembering/recall

2018-11-29 Thread Michal Privoznik
Because the implementation that will be used for label remembering/recall is not atomic we have to give callers a chance to enable or disable it. That is, enable it if and only if metadata locking is enabled. Otherwise the feature MUST be turned off. Signed-off-by: Michal Privoznik ---