aboutsummaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* Add <seclabel> to character devices.Richard W.M. Jones2012-09-211-26/+64
* maint: fix up copyright notice inconsistenciesEric Blake2012-09-201-1/+1
* Honour current sensitivity and category ranges in SELinux label generationDaniel P. Berrange2012-08-211-6/+107
* Fix regression generating image contextDaniel P. Berrange2012-08-211-1/+1
* Update security layer to handle many security labelsMarcelo Cerri2012-08-201-76/+179
* Internal refactory of data structuresMarcelo Cerri2012-08-201-68/+76
* selinux: Fix incorrect object label generation.Viktor Mihajlovski2012-08-201-6/+11
* Pull code which finds a free MCS label out into its own methodDaniel P. Berrange2012-08-141-28/+47
* Honour current user and role in SELinux label generationDaniel P. Berrange2012-08-141-1/+35
* Fix error reporting in virSecuritySELinuxGenNewContextDaniel P. Berrange2012-08-141-30/+37
* Desert the FSF address in copyrightOsier Yang2012-07-231-0/+9
* Use a hash table for storing MCS labelsDaniel P. Berrange2012-07-201-51/+31
* Fix error handling when adding MCS labelsDaniel P. Berrange2012-07-201-9/+32
* Use standard naming prefix for SELinux driver function namesDaniel P. Berrange2012-07-201-204/+212
* Replace use of virSecurityReportError with virReportErrorDaniel P. Berrange2012-07-201-53/+53
* security: Switch to C99-style struct initializationMichal Privoznik2012-05-241-26/+26
* Fix build compat with older libselinux for LXCDaniel P. Berrange2012-05-161-3/+16
* Add security driver APIs for getting mount optionsDaniel Walsh2012-05-161-0/+56
* Add support for LXC specific SELinux configurationDaniel Walsh2012-05-161-1/+79
* Use private data struct in SELinux driverDaniel Walsh2012-05-161-61/+104
* Pass the virt driver name into security driversDaniel Walsh2012-05-161-1/+1
* Cleanup for a return statement in source filesMartin Kletzander2012-03-261-1/+1
* qemu: eliminate "Ignoring open failure" when using root-squash NFSLaine Stump2012-02-031-0/+7
* Add two new security label typesDaniel P. Berrange2012-02-021-7/+25
* Introduce new API for generating random numbersDaniel P. Berrange2012-01-261-2/+3
* Change security driver APIs to use virDomainDefPtr instead of virDomainObjPtrDaniel P. Berrange2012-01-111-132/+128
* seclabel: honor device override in selinuxEric Blake2011-12-301-12/+41
* security: don't try to label network disksJosh Durgin2011-12-121-0/+3
* Allow multiple consoles per virtual guestDaniel P. Berrange2011-11-031-0/+10
* security: properly chown/label bidirectional and unidirectional fifosLaine Stump2011-09-281-12/+17
* selinux: Correctly report warning if virt_use_nfs not setMichal Privoznik2011-09-231-13/+16
* selinux: Detect virt_use_nfs boolean setMichal Privoznik2011-09-091-1/+10
* Remove bogus virSecurityManagerSetProcessFDLabel methodDaniel P. Berrange2011-08-311-14/+0
* security: Introduce SetSocketLabelJiri Denemark2011-08-261-0/+38
* security: Rename SetSocketLabel APIs to SetDaemonSocketLabelJiri Denemark2011-08-261-3/+3
* build: rename files.h to virfile.hEric Blake2011-07-211-1/+1
* Fix default value of security label 'relabel' attributeDaniel P. Berrange2011-07-061-10/+10
* Allow for resource relabelling with static labelsDaniel P. Berrange2011-07-041-58/+102
* Allow a base label to be specified in dynamic labelling modeDaniel P. Berrange2011-07-041-5/+24
* Add a virSecurityManagerSetProcessFDLabelDaniel P. Berrange2011-06-281-0/+14
* Rename virSecurityManagerSetFDLabel methodDaniel P. Berrange2011-06-281-4/+4
* Fix security driver handling of FIFOs with QEMUDaniel P. Berrange2011-05-061-7/+12
* build: detect potentential uninitialized variablesEric Blake2011-04-041-1/+2
* smartcard: enable SELinux supportEric Blake2011-02-031-0/+76
* Add a function to the security driver API that sets the label of an open fd.Laine Stump2011-01-261-0/+54
* domain_conf: split source data out from ChrDefEric Blake2011-01-141-5/+5
* Refactor the security drivers to simplify usageDaniel P. Berrange2011-01-101-54/+91
* Skip file-based security checks for network disksJosh Durgin2010-12-211-1/+1
* build: allow older libselinux againEric Blake2010-12-201-6/+23
* selinux: avoid memory overhead of matchpathconEric Blake2010-12-131-4/+8