2010-02-23 08:01:34 +08:00
|
|
|
*#*#
|
|
|
|
|
*.#*#
|
2017-03-03 20:43:51 +08:00
|
|
|
*.[187]
|
|
|
|
|
*.[187].in
|
2008-10-29 01:47:12 +08:00
|
|
|
*.a
|
2012-02-04 05:30:06 +08:00
|
|
|
*.cov
|
2010-04-29 11:36:03 +08:00
|
|
|
*.exe
|
2014-02-27 03:56:06 +08:00
|
|
|
*.exe.manifest
|
2010-06-10 02:35:49 +08:00
|
|
|
*.gcda
|
|
|
|
|
*.gcno
|
|
|
|
|
*.gcov
|
2012-02-04 05:30:06 +08:00
|
|
|
*.html
|
|
|
|
|
*.i
|
2016-05-03 21:36:01 +08:00
|
|
|
*.init
|
Prevent crash from dlclose() of libvirt.so
When libvirt calls virInitialize it creates a thread local
for the virErrorPtr storage, and registers a callback to
cleanup memory when a thread exits. When libvirt is dlclose()d
or otherwise made non-resident, the callback function is
removed from memory, but the thread local may still exist
and if a thread later exists, it will invoke the callback
and SEGV. There may also be other thread locals with callbacks
pointing to libvirt code, so it is in general never safe to
unload libvirt.so from memory once initialized.
To allow dlclose() to succeed, but keep libvirt.so resident
in memory, link with '-z nodelete'. This issue was first
found with the libvirt CIM provider, but can potentially
hit many of the dynamic language bindings which all ultimately
involve dlopen() in some way, either on libvirt.so itself,
or on the glue code for the binding which in turns links
to libvirt
* configure.ac, src/Makefile.am: Ensure libvirt.so is linked
with -z nodelete
* cfg.mk, .gitignore, tests/Makefile.am, tests/shunloadhelper.c,
tests/shunloadtest.c: A test case to unload libvirt while
a thread is still running.
2011-09-02 00:57:06 +08:00
|
|
|
*.la
|
|
|
|
|
*.lo
|
2012-02-04 05:30:06 +08:00
|
|
|
*.loT
|
2008-10-29 01:47:12 +08:00
|
|
|
*.o
|
2010-02-23 08:01:34 +08:00
|
|
|
*.orig
|
2014-01-15 05:28:57 +08:00
|
|
|
*.pem
|
2012-02-04 05:30:06 +08:00
|
|
|
*.pyc
|
2010-02-23 08:01:34 +08:00
|
|
|
*.rej
|
2012-02-04 05:30:06 +08:00
|
|
|
*.s
|
2016-05-03 21:36:01 +08:00
|
|
|
*.service
|
|
|
|
|
*.socket
|
2015-05-05 19:34:06 +08:00
|
|
|
*.swp
|
2008-10-29 01:47:12 +08:00
|
|
|
*~
|
2012-10-26 20:39:55 +08:00
|
|
|
.#*
|
2017-04-21 22:05:19 +08:00
|
|
|
.color_coded
|
2012-02-04 05:30:06 +08:00
|
|
|
.deps
|
build: use automake subdir-objects
Automake 2.0 will enable subdir-objects by default; in preparation
for that change, automake 1.14 outputs LOADS of warnings:
daemon/Makefile.am:38: warning: source file '../src/remote/remote_protocol.c' is in a subdirectory,
daemon/Makefile.am:38: but option 'subdir-objects' is disabled
automake-1.14: warning: possible forward-incompatibility.
automake-1.14: At least a source file is in a subdirectory, but the 'subdir-objects'
automake-1.14: automake option hasn't been enabled. For now, the corresponding output
automake-1.14: object file(s) will be placed in the top-level directory. However,
automake-1.14: this behaviour will change in future Automake versions: they will
automake-1.14: unconditionally cause object files to be placed in the same subdirectory
automake-1.14: of the corresponding sources.
automake-1.14: You are advised to start using 'subdir-objects' option throughout your
automake-1.14: project, to avoid future incompatibilities.
daemon/Makefile.am:38: warning: source file '../src/remote/lxc_protocol.c' is in a subdirectory,
daemon/Makefile.am:38: but option 'subdir-objects' is disabled
...
As automake 1.9 also supported this option, and the previous patches
fixed up the code base to work with it, it is safe to now turn it on
unconditionally.
* configure.ac (AM_INIT_AUTOMAKE): Enable subdir-objects.
* .gitignore: Ignore .dirstamp directories.
* src/Makefile.am (PDWTAGS, *-protocol-struct): Adjust to
new subdir-object location of .lo files.
Signed-off-by: Eric Blake <eblake@redhat.com>
2013-09-08 06:18:06 +08:00
|
|
|
.dirstamp
|
2012-09-14 17:09:51 +08:00
|
|
|
.gdb_history
|
2008-10-17 18:03:15 +08:00
|
|
|
.git
|
2009-07-10 16:01:04 +08:00
|
|
|
.git-module-status
|
2012-02-04 05:30:06 +08:00
|
|
|
.libs
|
2011-03-17 10:35:17 +08:00
|
|
|
.lvimrc
|
2012-02-04 05:30:06 +08:00
|
|
|
.memdump
|
2010-04-21 23:55:03 +08:00
|
|
|
.sc-start-sc_*
|
2017-04-21 22:47:02 +08:00
|
|
|
.ycm_extra_conf.py
|
2010-11-17 03:29:09 +08:00
|
|
|
/ABOUT-NLS
|
2012-10-13 07:50:19 +08:00
|
|
|
/AUTHORS
|
2010-11-17 03:29:09 +08:00
|
|
|
/ChangeLog
|
2010-02-23 08:01:34 +08:00
|
|
|
/GNUmakefile
|
2010-11-17 03:29:09 +08:00
|
|
|
/INSTALL
|
|
|
|
|
/NEWS
|
|
|
|
|
/aclocal.m4
|
|
|
|
|
/autom4te.cache
|
2017-04-07 14:50:21 +08:00
|
|
|
/build-aux/*
|
2010-04-30 22:52:54 +08:00
|
|
|
/build/
|
2014-11-06 19:17:19 +08:00
|
|
|
/confdefs.h
|
2010-11-17 03:29:09 +08:00
|
|
|
/config.cache
|
|
|
|
|
/config.guess
|
|
|
|
|
/config.h
|
|
|
|
|
/config.h.in
|
|
|
|
|
/config.log
|
|
|
|
|
/config.rpath
|
|
|
|
|
/config.status
|
|
|
|
|
/config.sub
|
|
|
|
|
/configure
|
|
|
|
|
/configure.lineno
|
2014-11-06 23:53:28 +08:00
|
|
|
/conftest.*
|
2011-05-17 01:13:11 +08:00
|
|
|
/daemon/*_dispatch.h
|
2012-02-04 05:30:06 +08:00
|
|
|
/daemon/libvirt_qemud
|
|
|
|
|
/daemon/libvirtd
|
|
|
|
|
/daemon/libvirtd*.logrotate
|
2012-10-12 22:51:48 +08:00
|
|
|
/daemon/libvirtd.policy
|
Autogenerate augeas test case from default config files
When adding new config file parameters, the corresponding
additions to the augeas lens' are constantly forgotten.
Also there are augeas test cases, these don't catch the
error, since they too are never updated.
To address this, the augeas test cases need to be auto-generated
from the example config files.
* build-aux/augeas-gentest.pl: Helper to generate an
augeas test file, substituting in elements from the
example config files
* src/Makefile.am, daemon/Makefile.am: Switch to
auto-generated augeas test cases
* daemon/test_libvirtd.aug, daemon/test_libvirtd.aug.in,
src/locking/test_libvirt_sanlock.aug,
src/locking/test_libvirt_sanlock.aug.in,
src/lxc/test_libvirtd_lxc.aug,
src/lxc/test_libvirtd_lxc.aug.in,
src/qemu/test_libvirtd_qemu.aug,
src/qemu/test_libvirtd_qemu.aug.in: Remove example
config file data, replacing with a ::CONFIG:: placeholder
Signed-off-by: Daniel P. Berrange <berrange@redhat.com>
2012-05-25 18:14:15 +08:00
|
|
|
/daemon/test_libvirtd.aug
|
2013-08-08 18:51:01 +08:00
|
|
|
/docs/aclperms.htmlinc
|
2012-04-28 00:05:12 +08:00
|
|
|
/docs/apibuild.py.stamp
|
2012-02-04 05:30:06 +08:00
|
|
|
/docs/devhelp/libvirt.devhelp
|
2011-05-16 23:33:56 +08:00
|
|
|
/docs/hvsupport.html.in
|
2015-04-15 22:23:25 +08:00
|
|
|
/docs/libvirt-admin-*.xml
|
2012-02-04 05:30:06 +08:00
|
|
|
/docs/libvirt-api.xml
|
Introduce an LXC specific public API & library
This patch introduces support for LXC specific public APIs. In
common with what was done for QEMU, this creates a libvirt_lxc.so
library and libvirt/libvirt-lxc.h header file.
The actual APIs are
int virDomainLxcOpenNamespace(virDomainPtr domain,
int **fdlist,
unsigned int flags);
int virDomainLxcEnterNamespace(virDomainPtr domain,
unsigned int nfdlist,
int *fdlist,
unsigned int *noldfdlist,
int **oldfdlist,
unsigned int flags);
which provide a way to use the setns() system call to move the
calling process into the container's namespace. It is not
practical to write in a generically applicable manner. The
nearest that we could get to such an API would be an API which
allows to pass a command + argv to be executed inside a
container. Even if we had such a generic API, this LXC specific
API is still useful, because it allows the caller to maintain
the current process context, in particular any I/O streams they
have open.
NB the virDomainLxcEnterNamespace() API is special in that it
runs client side, so does not involve the internal driver API.
Signed-off-by: Daniel P. Berrange <berrange@redhat.com>
2012-12-21 21:15:19 +08:00
|
|
|
/docs/libvirt-lxc-*.xml
|
2013-01-15 20:30:30 +08:00
|
|
|
/docs/libvirt-qemu-*.xml
|
2012-02-04 05:30:06 +08:00
|
|
|
/docs/libvirt-refs.xml
|
2017-01-03 19:22:54 +08:00
|
|
|
/docs/news.html.in
|
2012-08-01 21:29:27 +08:00
|
|
|
/docs/search.php
|
2012-02-04 05:30:06 +08:00
|
|
|
/docs/todo.html.in
|
2016-05-15 22:04:51 +08:00
|
|
|
/examples/admin/client_close
|
|
|
|
|
/examples/admin/client_info
|
|
|
|
|
/examples/admin/client_limits
|
|
|
|
|
/examples/admin/list_clients
|
|
|
|
|
/examples/admin/list_servers
|
2016-11-24 21:04:11 +08:00
|
|
|
/examples/admin/logging
|
2016-05-15 22:04:51 +08:00
|
|
|
/examples/admin/threadpool_params
|
2013-12-11 23:11:18 +08:00
|
|
|
/examples/object-events/event-test
|
2012-02-04 05:30:06 +08:00
|
|
|
/examples/dominfo/info1
|
2013-12-13 19:54:10 +08:00
|
|
|
/examples/domsuspend/suspend
|
2014-04-12 02:44:32 +08:00
|
|
|
/examples/dommigrate/dommigrate
|
2014-07-14 21:09:51 +08:00
|
|
|
/examples/domtop/domtop
|
2012-02-04 05:30:06 +08:00
|
|
|
/examples/hellolibvirt/hellolibvirt
|
|
|
|
|
/examples/openauth/openauth
|
2015-09-07 16:40:55 +08:00
|
|
|
/examples/rename/rename
|
2011-07-28 20:55:21 +08:00
|
|
|
/gnulib/lib/*
|
|
|
|
|
/gnulib/m4/*
|
|
|
|
|
/gnulib/tests/*
|
2015-11-26 22:02:49 +08:00
|
|
|
/include/libvirt/libvirt-common.h
|
2010-11-17 03:29:09 +08:00
|
|
|
/libtool
|
2016-06-15 19:19:32 +08:00
|
|
|
/libvirt-*.tar.xz
|
2010-05-20 06:16:47 +08:00
|
|
|
/libvirt-[0-9]*
|
2014-06-21 00:47:15 +08:00
|
|
|
/libvirt*.pc
|
2010-11-17 03:29:09 +08:00
|
|
|
/libvirt.spec
|
|
|
|
|
/ltconfig
|
|
|
|
|
/ltmain.sh
|
2011-04-06 03:06:31 +08:00
|
|
|
/m4/*
|
2010-02-23 08:01:34 +08:00
|
|
|
/maint.mk
|
2012-06-16 00:13:11 +08:00
|
|
|
/mingw-libvirt.spec
|
2010-11-17 03:29:09 +08:00
|
|
|
/mkinstalldirs
|
2011-04-06 03:06:31 +08:00
|
|
|
/po/*
|
2010-11-09 18:45:14 +08:00
|
|
|
/proxy/
|
2013-11-23 00:42:22 +08:00
|
|
|
/python/
|
2012-09-14 17:08:54 +08:00
|
|
|
/run
|
2011-08-19 07:03:26 +08:00
|
|
|
/sc_*
|
2012-07-23 22:45:20 +08:00
|
|
|
/src/.*.stamp
|
2014-06-21 00:48:12 +08:00
|
|
|
/src/*.pc
|
2012-01-23 23:12:57 +08:00
|
|
|
/src/access/org.libvirt.api.policy
|
Auto-generate helpers for checking access control rules
Extend the 'gendispatch.pl' script to be able to generate
three new types of file.
- 'aclheader' - defines signatures of helper APIs for
doing authorization checks. There is one helper API
for each API requiring an auth check. Any @acl
annotations result in a method being generated with
a suffix of 'EnsureACL'. If the ACL check requires
examination of flags, an extra 'flags' param will be
present. Some examples
extern int virConnectBaselineCPUEnsureACL(void);
extern int virConnectDomainEventDeregisterEnsureACL(virDomainDefPtr domain);
extern int virDomainAttachDeviceFlagsEnsureACL(virDomainDefPtr domain, unsigned int flags);
Any @aclfilter annotations resuilt in a method being
generated with a suffix of 'CheckACL'.
extern int virConnectListAllDomainsCheckACL(virDomainDefPtr domain);
These are used for filtering individual objects from APIs
which return a list of objects
- 'aclbody' - defines the actual implementation of the
methods described above. This calls into the access
manager APIs. A complex example:
/* Returns: -1 on error (denied==error), 0 on allowed */
int virDomainAttachDeviceFlagsEnsureACL(virConnectPtr conn,
virDomainDefPtr domain,
unsigned int flags)
{
virAccessManagerPtr mgr;
int rv;
if (!(mgr = virAccessManagerGetDefault()))
return -1;
if ((rv = virAccessManagerCheckDomain(mgr,
conn->driver->name,
domain,
VIR_ACCESS_PERM_DOMAIN_WRITE)) <= 0) {
virObjectUnref(mgr);
if (rv == 0)
virReportError(VIR_ERR_ACCESS_DENIED, NULL);
return -1;
}
if (((flags & (VIR_DOMAIN_AFFECT_CONFIG|VIR_DOMAIN_AFFECT_LIVE)) == 0) &&
(rv = virAccessManagerCheckDomain(mgr,
conn->driver->name,
domain,
VIR_ACCESS_PERM_DOMAIN_SAVE)) <= 0) {
virObjectUnref(mgr);
if (rv == 0)
virReportError(VIR_ERR_ACCESS_DENIED, NULL);
return -1;
}
if (((flags & (VIR_DOMAIN_AFFECT_CONFIG)) == (VIR_DOMAIN_AFFECT_CONFIG)) &&
(rv = virAccessManagerCheckDomain(mgr,
conn->driver->name,
domain,
VIR_ACCESS_PERM_DOMAIN_SAVE)) <= 0) {
virObjectUnref(mgr);
if (rv == 0)
virReportError(VIR_ERR_ACCESS_DENIED, NULL);
return -1;
}
virObjectUnref(mgr);
return 0;
}
- 'aclsyms' - generates a linker script to export the
APIs to drivers. Some examples
virConnectBaselineCPUEnsureACL;
virConnectCompareCPUEnsureACL;
Signed-off-by: Daniel P. Berrange <berrange@redhat.com>
2013-04-19 00:49:41 +08:00
|
|
|
/src/access/viraccessapicheck.c
|
|
|
|
|
/src/access/viraccessapicheck.h
|
|
|
|
|
/src/access/viraccessapichecklxc.c
|
|
|
|
|
/src/access/viraccessapichecklxc.h
|
|
|
|
|
/src/access/viraccessapicheckqemu.c
|
|
|
|
|
/src/access/viraccessapicheckqemu.h
|
2015-04-16 20:23:16 +08:00
|
|
|
/src/admin/admin_client.h
|
2015-04-15 22:13:22 +08:00
|
|
|
/src/admin/admin_protocol.[ch]
|
2018-01-19 19:30:31 +08:00
|
|
|
/src/admin/admin_server_dispatch_stubs.h
|
2012-02-04 05:30:06 +08:00
|
|
|
/src/esx/*.generated.*
|
2011-07-13 23:05:19 +08:00
|
|
|
/src/hyperv/*.generated.*
|
2012-02-04 05:30:06 +08:00
|
|
|
/src/libvirt*.def
|
|
|
|
|
/src/libvirt.syms
|
Auto-generate helpers for checking access control rules
Extend the 'gendispatch.pl' script to be able to generate
three new types of file.
- 'aclheader' - defines signatures of helper APIs for
doing authorization checks. There is one helper API
for each API requiring an auth check. Any @acl
annotations result in a method being generated with
a suffix of 'EnsureACL'. If the ACL check requires
examination of flags, an extra 'flags' param will be
present. Some examples
extern int virConnectBaselineCPUEnsureACL(void);
extern int virConnectDomainEventDeregisterEnsureACL(virDomainDefPtr domain);
extern int virDomainAttachDeviceFlagsEnsureACL(virDomainDefPtr domain, unsigned int flags);
Any @aclfilter annotations resuilt in a method being
generated with a suffix of 'CheckACL'.
extern int virConnectListAllDomainsCheckACL(virDomainDefPtr domain);
These are used for filtering individual objects from APIs
which return a list of objects
- 'aclbody' - defines the actual implementation of the
methods described above. This calls into the access
manager APIs. A complex example:
/* Returns: -1 on error (denied==error), 0 on allowed */
int virDomainAttachDeviceFlagsEnsureACL(virConnectPtr conn,
virDomainDefPtr domain,
unsigned int flags)
{
virAccessManagerPtr mgr;
int rv;
if (!(mgr = virAccessManagerGetDefault()))
return -1;
if ((rv = virAccessManagerCheckDomain(mgr,
conn->driver->name,
domain,
VIR_ACCESS_PERM_DOMAIN_WRITE)) <= 0) {
virObjectUnref(mgr);
if (rv == 0)
virReportError(VIR_ERR_ACCESS_DENIED, NULL);
return -1;
}
if (((flags & (VIR_DOMAIN_AFFECT_CONFIG|VIR_DOMAIN_AFFECT_LIVE)) == 0) &&
(rv = virAccessManagerCheckDomain(mgr,
conn->driver->name,
domain,
VIR_ACCESS_PERM_DOMAIN_SAVE)) <= 0) {
virObjectUnref(mgr);
if (rv == 0)
virReportError(VIR_ERR_ACCESS_DENIED, NULL);
return -1;
}
if (((flags & (VIR_DOMAIN_AFFECT_CONFIG)) == (VIR_DOMAIN_AFFECT_CONFIG)) &&
(rv = virAccessManagerCheckDomain(mgr,
conn->driver->name,
domain,
VIR_ACCESS_PERM_DOMAIN_SAVE)) <= 0) {
virObjectUnref(mgr);
if (rv == 0)
virReportError(VIR_ERR_ACCESS_DENIED, NULL);
return -1;
}
virObjectUnref(mgr);
return 0;
}
- 'aclsyms' - generates a linker script to export the
APIs to drivers. Some examples
virConnectBaselineCPUEnsureACL;
virConnectCompareCPUEnsureACL;
Signed-off-by: Daniel P. Berrange <berrange@redhat.com>
2013-04-19 00:49:41 +08:00
|
|
|
/src/libvirt_access.syms
|
2013-08-07 20:03:50 +08:00
|
|
|
/src/libvirt_access.xml
|
Auto-generate helpers for checking access control rules
Extend the 'gendispatch.pl' script to be able to generate
three new types of file.
- 'aclheader' - defines signatures of helper APIs for
doing authorization checks. There is one helper API
for each API requiring an auth check. Any @acl
annotations result in a method being generated with
a suffix of 'EnsureACL'. If the ACL check requires
examination of flags, an extra 'flags' param will be
present. Some examples
extern int virConnectBaselineCPUEnsureACL(void);
extern int virConnectDomainEventDeregisterEnsureACL(virDomainDefPtr domain);
extern int virDomainAttachDeviceFlagsEnsureACL(virDomainDefPtr domain, unsigned int flags);
Any @aclfilter annotations resuilt in a method being
generated with a suffix of 'CheckACL'.
extern int virConnectListAllDomainsCheckACL(virDomainDefPtr domain);
These are used for filtering individual objects from APIs
which return a list of objects
- 'aclbody' - defines the actual implementation of the
methods described above. This calls into the access
manager APIs. A complex example:
/* Returns: -1 on error (denied==error), 0 on allowed */
int virDomainAttachDeviceFlagsEnsureACL(virConnectPtr conn,
virDomainDefPtr domain,
unsigned int flags)
{
virAccessManagerPtr mgr;
int rv;
if (!(mgr = virAccessManagerGetDefault()))
return -1;
if ((rv = virAccessManagerCheckDomain(mgr,
conn->driver->name,
domain,
VIR_ACCESS_PERM_DOMAIN_WRITE)) <= 0) {
virObjectUnref(mgr);
if (rv == 0)
virReportError(VIR_ERR_ACCESS_DENIED, NULL);
return -1;
}
if (((flags & (VIR_DOMAIN_AFFECT_CONFIG|VIR_DOMAIN_AFFECT_LIVE)) == 0) &&
(rv = virAccessManagerCheckDomain(mgr,
conn->driver->name,
domain,
VIR_ACCESS_PERM_DOMAIN_SAVE)) <= 0) {
virObjectUnref(mgr);
if (rv == 0)
virReportError(VIR_ERR_ACCESS_DENIED, NULL);
return -1;
}
if (((flags & (VIR_DOMAIN_AFFECT_CONFIG)) == (VIR_DOMAIN_AFFECT_CONFIG)) &&
(rv = virAccessManagerCheckDomain(mgr,
conn->driver->name,
domain,
VIR_ACCESS_PERM_DOMAIN_SAVE)) <= 0) {
virObjectUnref(mgr);
if (rv == 0)
virReportError(VIR_ERR_ACCESS_DENIED, NULL);
return -1;
}
virObjectUnref(mgr);
return 0;
}
- 'aclsyms' - generates a linker script to export the
APIs to drivers. Some examples
virConnectBaselineCPUEnsureACL;
virConnectCompareCPUEnsureACL;
Signed-off-by: Daniel P. Berrange <berrange@redhat.com>
2013-04-19 00:49:41 +08:00
|
|
|
/src/libvirt_access_lxc.syms
|
2013-08-07 20:03:50 +08:00
|
|
|
/src/libvirt_access_lxc.xml
|
Auto-generate helpers for checking access control rules
Extend the 'gendispatch.pl' script to be able to generate
three new types of file.
- 'aclheader' - defines signatures of helper APIs for
doing authorization checks. There is one helper API
for each API requiring an auth check. Any @acl
annotations result in a method being generated with
a suffix of 'EnsureACL'. If the ACL check requires
examination of flags, an extra 'flags' param will be
present. Some examples
extern int virConnectBaselineCPUEnsureACL(void);
extern int virConnectDomainEventDeregisterEnsureACL(virDomainDefPtr domain);
extern int virDomainAttachDeviceFlagsEnsureACL(virDomainDefPtr domain, unsigned int flags);
Any @aclfilter annotations resuilt in a method being
generated with a suffix of 'CheckACL'.
extern int virConnectListAllDomainsCheckACL(virDomainDefPtr domain);
These are used for filtering individual objects from APIs
which return a list of objects
- 'aclbody' - defines the actual implementation of the
methods described above. This calls into the access
manager APIs. A complex example:
/* Returns: -1 on error (denied==error), 0 on allowed */
int virDomainAttachDeviceFlagsEnsureACL(virConnectPtr conn,
virDomainDefPtr domain,
unsigned int flags)
{
virAccessManagerPtr mgr;
int rv;
if (!(mgr = virAccessManagerGetDefault()))
return -1;
if ((rv = virAccessManagerCheckDomain(mgr,
conn->driver->name,
domain,
VIR_ACCESS_PERM_DOMAIN_WRITE)) <= 0) {
virObjectUnref(mgr);
if (rv == 0)
virReportError(VIR_ERR_ACCESS_DENIED, NULL);
return -1;
}
if (((flags & (VIR_DOMAIN_AFFECT_CONFIG|VIR_DOMAIN_AFFECT_LIVE)) == 0) &&
(rv = virAccessManagerCheckDomain(mgr,
conn->driver->name,
domain,
VIR_ACCESS_PERM_DOMAIN_SAVE)) <= 0) {
virObjectUnref(mgr);
if (rv == 0)
virReportError(VIR_ERR_ACCESS_DENIED, NULL);
return -1;
}
if (((flags & (VIR_DOMAIN_AFFECT_CONFIG)) == (VIR_DOMAIN_AFFECT_CONFIG)) &&
(rv = virAccessManagerCheckDomain(mgr,
conn->driver->name,
domain,
VIR_ACCESS_PERM_DOMAIN_SAVE)) <= 0) {
virObjectUnref(mgr);
if (rv == 0)
virReportError(VIR_ERR_ACCESS_DENIED, NULL);
return -1;
}
virObjectUnref(mgr);
return 0;
}
- 'aclsyms' - generates a linker script to export the
APIs to drivers. Some examples
virConnectBaselineCPUEnsureACL;
virConnectCompareCPUEnsureACL;
Signed-off-by: Daniel P. Berrange <berrange@redhat.com>
2013-04-19 00:49:41 +08:00
|
|
|
/src/libvirt_access_qemu.syms
|
2013-08-07 20:03:50 +08:00
|
|
|
/src/libvirt_access_qemu.xml
|
2015-08-21 02:03:12 +08:00
|
|
|
/src/libvirt_admin.syms
|
2012-02-04 05:30:06 +08:00
|
|
|
/src/libvirt_*.stp
|
|
|
|
|
/src/libvirt_*helper
|
2012-05-25 10:43:43 +08:00
|
|
|
/src/libvirt_*probes.h
|
2012-02-04 05:30:06 +08:00
|
|
|
/src/libvirt_lxc
|
2015-05-01 00:32:58 +08:00
|
|
|
/src/locking/libxl-lockd.conf
|
|
|
|
|
/src/locking/libxl-sanlock.conf
|
2012-08-03 17:27:07 +08:00
|
|
|
/src/locking/lock_daemon_dispatch_stubs.h
|
2011-07-07 00:20:04 +08:00
|
|
|
/src/locking/lock_protocol.[ch]
|
2011-07-07 00:30:08 +08:00
|
|
|
/src/locking/qemu-lockd.conf
|
2011-08-16 04:42:43 +08:00
|
|
|
/src/locking/qemu-sanlock.conf
|
Autogenerate augeas test case from default config files
When adding new config file parameters, the corresponding
additions to the augeas lens' are constantly forgotten.
Also there are augeas test cases, these don't catch the
error, since they too are never updated.
To address this, the augeas test cases need to be auto-generated
from the example config files.
* build-aux/augeas-gentest.pl: Helper to generate an
augeas test file, substituting in elements from the
example config files
* src/Makefile.am, daemon/Makefile.am: Switch to
auto-generated augeas test cases
* daemon/test_libvirtd.aug, daemon/test_libvirtd.aug.in,
src/locking/test_libvirt_sanlock.aug,
src/locking/test_libvirt_sanlock.aug.in,
src/lxc/test_libvirtd_lxc.aug,
src/lxc/test_libvirtd_lxc.aug.in,
src/qemu/test_libvirtd_qemu.aug,
src/qemu/test_libvirtd_qemu.aug.in: Remove example
config file data, replacing with a ::CONFIG:: placeholder
Signed-off-by: Daniel P. Berrange <berrange@redhat.com>
2012-05-25 18:14:15 +08:00
|
|
|
/src/locking/test_libvirt_sanlock.aug
|
2015-02-10 00:35:05 +08:00
|
|
|
/src/logging/log_daemon_dispatch_stubs.h
|
|
|
|
|
/src/logging/log_protocol.[ch]
|
2012-07-17 22:54:08 +08:00
|
|
|
/src/lxc/lxc_controller_dispatch.h
|
|
|
|
|
/src/lxc/lxc_monitor_dispatch.h
|
2012-12-21 21:19:54 +08:00
|
|
|
/src/lxc/lxc_monitor_protocol.c
|
|
|
|
|
/src/lxc/lxc_monitor_protocol.h
|
2013-02-18 13:04:17 +08:00
|
|
|
/src/lxc/lxc_protocol.[ch]
|
2012-08-01 19:40:56 +08:00
|
|
|
/src/lxc/test_libvirtd_lxc.aug
|
Autogenerate augeas test case from default config files
When adding new config file parameters, the corresponding
additions to the augeas lens' are constantly forgotten.
Also there are augeas test cases, these don't catch the
error, since they too are never updated.
To address this, the augeas test cases need to be auto-generated
from the example config files.
* build-aux/augeas-gentest.pl: Helper to generate an
augeas test file, substituting in elements from the
example config files
* src/Makefile.am, daemon/Makefile.am: Switch to
auto-generated augeas test cases
* daemon/test_libvirtd.aug, daemon/test_libvirtd.aug.in,
src/locking/test_libvirt_sanlock.aug,
src/locking/test_libvirt_sanlock.aug.in,
src/lxc/test_libvirtd_lxc.aug,
src/lxc/test_libvirtd_lxc.aug.in,
src/qemu/test_libvirtd_qemu.aug,
src/qemu/test_libvirtd_qemu.aug.in: Remove example
config file data, replacing with a ::CONFIG:: placeholder
Signed-off-by: Daniel P. Berrange <berrange@redhat.com>
2012-05-25 18:14:15 +08:00
|
|
|
/src/qemu/test_libvirtd_qemu.aug
|
2011-05-06 21:11:32 +08:00
|
|
|
/src/remote/*_client_bodies.h
|
|
|
|
|
/src/remote/*_protocol.[ch]
|
2011-09-22 18:51:55 +08:00
|
|
|
/src/rpc/virkeepaliveprotocol.[ch]
|
2010-12-07 01:03:10 +08:00
|
|
|
/src/rpc/virnetprotocol.[ch]
|
2012-05-30 05:49:13 +08:00
|
|
|
/src/test_libvirt*.aug
|
2013-08-08 23:06:31 +08:00
|
|
|
/src/test_virtlockd.aug
|
2015-02-10 00:35:05 +08:00
|
|
|
/src/test_virtlogd.aug
|
2017-03-02 18:46:53 +08:00
|
|
|
/src/util/virkeycodetable*.h
|
|
|
|
|
/src/util/virkeynametable*.h
|
2012-02-04 05:30:06 +08:00
|
|
|
/src/virt-aa-helper
|
2012-08-03 03:06:50 +08:00
|
|
|
/src/virtlockd
|
2015-02-10 00:35:05 +08:00
|
|
|
/src/virtlogd
|
2010-11-17 03:29:09 +08:00
|
|
|
/tests/*.log
|
2012-02-04 05:30:06 +08:00
|
|
|
/tests/*.pid
|
2013-01-28 22:19:14 +08:00
|
|
|
/tests/*.trs
|
2014-03-07 19:50:36 +08:00
|
|
|
/tests/*test
|
2016-05-05 16:09:32 +08:00
|
|
|
/tests/commandhelper
|
|
|
|
|
/tests/qemucapsprobe
|
2016-06-18 01:28:12 +08:00
|
|
|
!/tests/virsh-self-test
|
2014-03-07 19:50:36 +08:00
|
|
|
!/tests/virt-aa-helper-test
|
2016-09-14 16:08:48 +08:00
|
|
|
!/tests/virt-admin-self-test
|
2014-02-13 22:20:04 +08:00
|
|
|
/tests/objectlocking
|
|
|
|
|
/tests/objectlocking-files.txt
|
|
|
|
|
/tests/objectlocking.cm[ix]
|
2012-02-04 05:30:06 +08:00
|
|
|
/tests/reconnect
|
|
|
|
|
/tests/ssh
|
2016-04-18 20:10:33 +08:00
|
|
|
/tests/test_file_access.txt
|
2013-03-20 02:36:28 +08:00
|
|
|
/tests/test_conf
|
2012-10-21 10:29:51 +08:00
|
|
|
/tools/libvirt-guests.sh
|
2013-08-08 23:36:31 +08:00
|
|
|
/tools/virt-login-shell
|
2012-02-04 05:30:06 +08:00
|
|
|
/tools/virsh
|
|
|
|
|
/tools/virsh-*-edit.c
|
2015-10-12 23:07:21 +08:00
|
|
|
/tools/virt-admin
|
2012-02-04 05:30:06 +08:00
|
|
|
/tools/virt-*-validate
|
|
|
|
|
/tools/virt-sanlock-cleanup
|
2014-01-16 01:06:58 +08:00
|
|
|
/tools/wireshark/src/plugin.c
|
|
|
|
|
/tools/wireshark/src/libvirt
|
2010-11-17 03:29:09 +08:00
|
|
|
/update.log
|
2013-10-23 16:58:55 +08:00
|
|
|
GPATH
|
|
|
|
|
GRTAGS
|
|
|
|
|
GTAGS
|
2008-10-17 18:03:15 +08:00
|
|
|
Makefile
|
2008-10-29 01:47:12 +08:00
|
|
|
Makefile.in
|
2010-12-02 07:48:19 +08:00
|
|
|
TAGS
|
2008-10-29 01:47:12 +08:00
|
|
|
coverage
|
2009-07-03 22:32:17 +08:00
|
|
|
cscope.files
|
2012-11-05 12:59:53 +08:00
|
|
|
cscope.in.out
|
2009-07-03 22:32:17 +08:00
|
|
|
cscope.out
|
2012-11-05 12:59:53 +08:00
|
|
|
cscope.po.out
|
2008-10-29 01:47:12 +08:00
|
|
|
results.log
|
|
|
|
|
stamp-h
|
|
|
|
|
stamp-h.in
|
|
|
|
|
stamp-h1
|
2012-10-31 23:47:34 +08:00
|
|
|
tags
|
2016-06-18 01:31:42 +08:00
|
|
|
!/build-aux/*.pl
|
2011-07-28 20:55:21 +08:00
|
|
|
!/gnulib/lib/Makefile.am
|
|
|
|
|
!/gnulib/tests/Makefile.am
|
2011-04-06 03:06:31 +08:00
|
|
|
!/m4/virt-*.m4
|
|
|
|
|
!/po/*.po
|
|
|
|
|
!/po/POTFILES.in
|
|
|
|
|
!/po/libvirt.pot
|