From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([208.118.235.92]:57846) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1T0yyr-0000KU-70 for qemu-devel@nongnu.org; Mon, 13 Aug 2012 14:03:10 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1T0yyl-0004nL-IW for qemu-devel@nongnu.org; Mon, 13 Aug 2012 14:03:09 -0400 Received: from mx1.redhat.com ([209.132.183.28]:12735) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1T0yyl-0004nD-9a for qemu-devel@nongnu.org; Mon, 13 Aug 2012 14:03:03 -0400 Message-ID: <5029414E.7020608@redhat.com> Date: Mon, 13 Aug 2012 12:02:54 -0600 From: Eric Blake MIME-Version: 1.0 References: <1344866929-30456-1-git-send-email-coreyb@linux.vnet.ibm.com> In-Reply-To: <1344866929-30456-1-git-send-email-coreyb@linux.vnet.ibm.com> Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="------------enig9C6D3A4521613481DF978F73" Subject: Re: [Qemu-devel] [PATCH v10 0/7] file descriptor passing using fd sets List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: Corey Bryant Cc: kwolf@redhat.com, aliguori@us.ibm.com, stefanha@linux.vnet.ibm.com, libvir-list@redhat.com, qemu-devel@nongnu.org, lcapitulino@redhat.com, pbonzini@redhat.com This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enig9C6D3A4521613481DF978F73 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable On 08/13/2012 08:08 AM, Corey Bryant wrote: > libvirt's sVirt security driver provides SELinux MAC isolation for > Qemu guest processes and their corresponding image files. In other > words, sVirt uses SELinux to prevent a QEMU process from opening > files that do not belong to it. >=20 > Corey Bryant (7): > qemu-char: Add MSG_CMSG_CLOEXEC flag to recvmsg > qapi: Introduce add-fd, remove-fd, query-fdsets > block: Prevent detection of /dev/fdset/ as floppy > block: Convert open calls to qemu_open > block: Convert close calls to qemu_close > block: Enable qemu_open/close to work with fd sets > monitor: Clean up fd sets on monitor disconnect Hooray - I think we're there! Series: Reviewed-by: Eric Blake --=20 Eric Blake eblake@redhat.com +1-919-301-3266 Libvirt virtualization library http://libvirt.org --------------enig9C6D3A4521613481DF978F73 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Public key at http://people.redhat.com/eblake/eblake.gpg Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEcBAEBCAAGBQJQKUFOAAoJEKeha0olJ0Nq/XEH/22VExWwyYcnfhWyQ0p6H9ZQ i74+sMxlNxgkXHCSS67fN6YAKqZcF/fl30FIB5ra/psoX5a8Xx7w27plju+JcCRu 491Ou7MhkgyIXQ4MkgImxWtjR2CIA1IFJPpmL/pC17wDeHOXSHkNu4xmv0AlBWwI R1ZEe0kVjSHL/yuUSggWfEYqUVuDn1g9OtAK3dsDffx+GVoMWASy1KEG1HwyHkwn 0H07PQYDhPrlDVwk2oYQX1h1ncmStpB9/ezufRvhibQyv/R40Cxq2vJvOw+NHaKM ZpQkexaWBy1+DQT03kP3KbYm6qvMPbn+5KSPncFf6YDx1POqbo1JFw/EiZlJizA= =YX0E -----END PGP SIGNATURE----- --------------enig9C6D3A4521613481DF978F73--