提交 11fc5629 编写于 作者: D Daniel P. Berrangé

cgroup: remove use of the term 'whitelist' from cgroup code

The term "access control list" better describes the concept involved.
Reviewed-by: NPeter Krempa <pkrempa@redhat.com>
Signed-off-by: NDaniel P. Berrangé <berrange@redhat.com>
上级 5f75ec90
...@@ -374,7 +374,7 @@ static int virLXCCgroupSetupDeviceACL(virDomainDefPtr def, ...@@ -374,7 +374,7 @@ static int virLXCCgroupSetupDeviceACL(virDomainDefPtr def,
return -1; return -1;
} }
VIR_DEBUG("Device whitelist complete"); VIR_DEBUG("Device ACL setup complete");
return 0; return 0;
} }
......
...@@ -464,7 +464,7 @@ ...@@ -464,7 +464,7 @@
# What cgroup controllers to make use of with QEMU guests # What cgroup controllers to make use of with QEMU guests
# #
# - 'cpu' - use for scheduler tunables # - 'cpu' - use for scheduler tunables
# - 'devices' - use for device whitelisting # - 'devices' - use for device access control
# - 'memory' - use for memory tunables # - 'memory' - use for memory tunables
# - 'blkio' - use for block devices I/O tunables # - 'blkio' - use for block devices I/O tunables
# - 'cpuset' - use for CPUs and memory nodes # - 'cpuset' - use for CPUs and memory nodes
......
...@@ -745,7 +745,7 @@ qemuSetupDevicesCgroup(virDomainObjPtr vm) ...@@ -745,7 +745,7 @@ qemuSetupDevicesCgroup(virDomainObjPtr vm)
if (rv < 0) { if (rv < 0) {
if (virLastErrorIsSystemErrno(EPERM)) { if (virLastErrorIsSystemErrno(EPERM)) {
virResetLastError(); virResetLastError();
VIR_WARN("Group devices ACL is not accessible, disabling whitelisting"); VIR_WARN("Group devices ACL is not accessible, disabling filtering");
return 0; return 0;
} }
......
...@@ -773,7 +773,7 @@ virCgroupSetPartitionSuffix(const char *path, char **res) ...@@ -773,7 +773,7 @@ virCgroupSetPartitionSuffix(const char *path, char **res)
return ret; return ret;
for (i = 0; tokens[i] != NULL; i++) { for (i = 0; tokens[i] != NULL; i++) {
/* Whitelist the 3 top level fixed dirs /* Special case the 3 top level fixed dirs
* NB i == 0 is "", since we have leading '/' * NB i == 0 is "", since we have leading '/'
*/ */
if (i == 1 && if (i == 1 &&
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册