• E
    audit: split cgroup audit types to allow more information · d04916fa
    Eric Blake 提交于
    Device names can be manipulated, so it is better to also log
    the major/minor device number corresponding to the cgroup ACL
    changes that libvirt made.  This required some refactoring
    of the relatively new qemu cgroup audit code.
    
    Also, qemuSetupChardevCgroup was only auditing on failure, not success.
    
    * src/qemu/qemu_audit.h (qemuDomainCgroupAudit): Delete.
    (qemuAuditCgroup, qemuAuditCgroupMajor, qemuAuditCgroupPath): New
    prototypes.
    * src/qemu/qemu_audit.c (qemuDomainCgroupAudit): Rename...
    (qemuAuditCgroup): ...and drop a parameter.
    (qemuAuditCgroupMajor, qemuAuditCgroupPath): New functions, to
    allow listing device major/minor in audit.
    (qemuAuditGetRdev): New helper function.
    * src/qemu/qemu_driver.c (qemudDomainSaveFlag): Adjust callers.
    * src/qemu/qemu_cgroup.c (qemuSetupDiskPathAllow)
    (qemuSetupHostUsbDeviceCgroup, qemuSetupCgroup)
    (qemuTeardownDiskPathDeny): Likewise.
    (qemuSetupChardevCgroup): Likewise, fixing missing audit.
    d04916fa
qemu_cgroup.c 13.0 KB