提交 c7eea3f5 编写于 作者: C Cole Robinson

security: apparmor: Push virStorageSource checks to add_file_path

This mirrors the code layout in security_selinux.c. It will also make
it easier to share the checks for qcow2 external data_file support
eventually
Reviewed-by: NMichal Privoznik <mprivozn@redhat.com>
Signed-off-by: NCole Robinson <crobinso@redhat.com>
上级 7c0bf48b
......@@ -917,6 +917,10 @@ add_file_path(virStorageSourcePtr src,
{
int ret;
/* execute the callback only for local storage */
if (!src->path || !virStorageSourceIsLocalStorage(src))
return 0;
if (depth == 0) {
if (src->readonly)
ret = vah_add_file(buf, src->path, "rk");
......@@ -941,12 +945,8 @@ disk_add_files(virDomainDiskDefPtr disk,
virStorageSourcePtr tmp;
for (tmp = disk->src; virStorageSourceIsBacking(tmp); tmp = tmp->backingStore) {
/* execute the callback only for local storage */
if (virStorageSourceIsLocalStorage(tmp) &&
tmp->path) {
if (add_file_path(tmp, depth, buf) < 0)
return -1;
}
if (add_file_path(tmp, depth, buf) < 0)
return -1;
depth++;
}
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册