Re: [libvirt] [PATCH v5 0/6] file descriptor passing using fd sets

2012-07-24 Thread Kevin Wolf
Am 23.07.2012 15:07, schrieb Corey Bryant: Corey Bryant (6): qemu-char: Add MSG_CMSG_CLOEXEC flag to recvmsg qapi: Introduce add-fd, remove-fd, query-fdsets monitor: Clean up fd sets on monitor disconnect block: Convert open calls to qemu_open block: Convert close calls to

[libvirt] [PATCH v5 0/6] file descriptor passing using fd sets

2012-07-23 Thread Corey Bryant
libvirt's sVirt security driver provides SELinux MAC isolation for Qemu guest processes and their corresponding image files. In other words, sVirt uses SELinux to prevent a QEMU process from opening files that do not belong to it. sVirt provides this support by labeling guests and resources with