[libvirt] [PATCH] news: Document original owner remembering

Michal Privoznik posted 1 patch 13 weeks ago
Test syntax-check passed
Patches applied successfully (tree, apply log)
git fetch https://github.com/patchew-project/libvirt tags/patchew/56c79f10ada759eb28f37f2d0e287cf135e992e2.1545230996.git.mprivozn@redhat.com
docs/news.xml | 13 +++++++++++++
1 file changed, 13 insertions(+)

[libvirt] [PATCH] news: Document original owner remembering

Posted by Michal Privoznik 13 weeks ago
Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
---
 docs/news.xml | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/docs/news.xml b/docs/news.xml
index e9b6bb7c65..09a34d1705 100644
--- a/docs/news.xml
+++ b/docs/news.xml
@@ -79,6 +79,19 @@
           qemu: Add support for ARMv6l guests
         </summary>
       </change>
+      <change>
+        <summary>
+          Remember original owners and SELinux labels of files
+        </summary>
+        <description>
+          When a domain is starting up libvirt changes DAC and
+          SELinux labels so that domain can access it. However,
+          it never remembered the original labels and therefore
+          the file was returned back to root:root. With this
+          release, the original labels are remembered and
+          restored properly.
+        </description>
+      </change>
     </section>
     <section title="Bug fixes">
     </section>
-- 
2.19.2

--
libvir-list mailing list
libvir-list@redhat.com
https://www.redhat.com/mailman/listinfo/libvir-list

Re: [libvirt] [PATCH] news: Document original owner remembering

Posted by Andrea Bolognani 13 weeks ago
On Wed, 2018-12-19 at 15:49 +0100, Michal Privoznik wrote:
> +      <change>
> +        <summary>
> +          Remember original owners and SELinux labels of files
> +        </summary>
> +        <description>
> +          When a domain is starting up libvirt changes DAC and
> +          SELinux labels so that domain can access it. However,
> +          it never remembered the original labels and therefore
> +          the file was returned back to root:root. With this
> +          release, the original labels are remembered and
> +          restored properly.
> +        </description>
> +      </change>

I suggest you use <code>root:root</code> above for nicer
rendering in browsers.

Either way,

  Reviewed-by: Andrea Bolognani <abologna@redhat.com>

-- 
Andrea Bolognani / Red Hat / Virtualization

--
libvir-list mailing list
libvir-list@redhat.com
https://www.redhat.com/mailman/listinfo/libvir-list