mirror of
https://gitlab.com/libvirt/libvirt.git
synced 2024-12-26 03:21:44 +03:00
security: dac: Label externalDataStore
We mirror the labeling strategy that was used for its sibling image Reviewed-by: Daniel Henrique Barboza <danielhb413@gmail.com> Reviewed-by: Michal Privoznik <mprivozn@redhat.com> Signed-off-by: Cole Robinson <crobinso@redhat.com>
This commit is contained in:
parent
aa736c098e
commit
efe3575e60
@ -884,7 +884,7 @@ virSecurityDACSetImageLabelInternal(virSecurityManagerPtr mgr,
|
||||
virSecurityDeviceLabelDefPtr parent_seclabel = NULL;
|
||||
virSecurityDACDataPtr priv = virSecurityManagerGetPrivateData(mgr);
|
||||
bool remember;
|
||||
bool is_toplevel = parent == src;
|
||||
bool is_toplevel = parent == src || parent->externalDataStore == src;
|
||||
uid_t user;
|
||||
gid_t group;
|
||||
|
||||
@ -948,6 +948,14 @@ virSecurityDACSetImageLabelRelative(virSecurityManagerPtr mgr,
|
||||
if (virSecurityDACSetImageLabelInternal(mgr, def, n, parent) < 0)
|
||||
return -1;
|
||||
|
||||
if (n->externalDataStore &&
|
||||
virSecurityDACSetImageLabelRelative(mgr,
|
||||
def,
|
||||
n->externalDataStore,
|
||||
parent,
|
||||
flags) < 0)
|
||||
return -1;
|
||||
|
||||
if (!(flags & VIR_SECURITY_DOMAIN_IMAGE_LABEL_BACKING_CHAIN))
|
||||
break;
|
||||
}
|
||||
|
Loading…
Reference in New Issue
Block a user