{"push_id":1383345793,"size":15,"distinct_size":14,"ref":"refs/heads/seclabels2","head":"8e622f4d3bdca92ed5964949e7ed277e8e5abfd7","before":"7f4913b9e713b9effe6aed8fa6038dd634527fc9","commits":[{"sha":"e8861f69714f283ddfa3cac5713feac46884a2ea","author":{"name":"Michal Privoznik","email":"ff52d8b477e4489d0b3b856d550bc61214c6ad4b@redhat.com"},"message":"libvirt.spec: Build & run tests in parallel\n\nSo far, the main code is built in parallel, which makes it pretty\nfast. But with a lots of tests we have now I've noticed this part\ntakes too much time to build. The problem was that tests were\nbuild and run in a single job.\n\nAlso, 'make' in the first hunk is useless. The test suite is not\nbuilt due to 'make all' because there's no .git in the sources\nunpacked from a tar.xz archive. It's 'make check' which triggers\ntests build.\n\nSigned-off-by: Michal Privoznik <mprivozn@redhat.com>","distinct":false,"url":"https://api.github.com/repos/zippy2/libvirt/commits/e8861f69714f283ddfa3cac5713feac46884a2ea"},{"sha":"1ee404959b27e3557f4cf1d984b2f24996e73864","author":{"name":"Michal Privoznik","email":"ff52d8b477e4489d0b3b856d550bc61214c6ad4b@redhat.com"},"message":"lock_protocol: Add two new remote procedures\n\nThese procedures will be used to store and bring back security\nlabels. So far, the idea is that tuple (path, model, label) is\nenough. Well, certainly for DAC and SELinux. The functions are:\n\n  VIR_LOCK_SPACE_PROTOCOL_PROC_REMEMBER_SECLABEL\n  VIR_LOCK_SPACE_PROTOCOL_PROC_RECALL_SECLABEL\n\nYeah, they really need that VIR_LOCK_SPACE_PROTOCOL_PROC prefix\ndue to way we call gendispatch.pl.\n\nSo the former will take the whole tuple and remember it. The\nlatter will then take just pair of (path, model) and return label\nstored previously. Moreover, the return value of recall will be\nimportant: value greater than zero means @path is still in use,\ndon't relabel it. Value of zero means @path is no longer used,\nand a negative value means an error (e.g. @path not found, OOM,\netc.).\n\nSigned-off-by: Michal Privoznik <mprivozn@redhat.com>","distinct":true,"url":"https://api.github.com/repos/zippy2/libvirt/commits/1ee404959b27e3557f4cf1d984b2f24996e73864"},{"sha":"c7585c60ef12a83c0079c094adcbc98c4c89d2e0","author":{"name":"Michal Privoznik","email":"ff52d8b477e4489d0b3b856d550bc61214c6ad4b@redhat.com"},"message":"locking: Introduce virSeclabelSpace\n\nThis module will handle all the security label remembering and\nrecalling for virlockd. We need to record a tuple of (path,\nsecurity model, security label). So I'm going with a hash table,\nwhere @path would be the key, and tuple of (model, label) is\ngoing to be the payload. Well, the payload tuple is wrapped into\nself inflating array (virSeclabelSpaceLabels). So for each path,\nwe will have to traverse through array of various models to find\nthe needed one. But since there's gonna be many paths and just a\nfew security models, it's going to be the best approach.\n\nSigned-off-by: Michal Privoznik <mprivozn@redhat.com>","distinct":true,"url":"https://api.github.com/repos/zippy2/libvirt/commits/c7585c60ef12a83c0079c094adcbc98c4c89d2e0"},{"sha":"fa14823563cbebca0ba2a4ce87346c55778fb73f","author":{"name":"Michal Privoznik","email":"ff52d8b477e4489d0b3b856d550bc61214c6ad4b@redhat.com"},"message":"virtlockd: Work virSeclabelSpace in\n\nSigned-off-by: Michal Privoznik <mprivozn@redhat.com>","distinct":true,"url":"https://api.github.com/repos/zippy2/libvirt/commits/fa14823563cbebca0ba2a4ce87346c55778fb73f"},{"sha":"38bb615134410990740b8b0d25d56081fe15be21","author":{"name":"Michal Privoznik","email":"ff52d8b477e4489d0b3b856d550bc61214c6ad4b@redhat.com"},"message":"virLockDriver: Introduce virLockDriverRemember and virLockDriverRecall\n\nThese are just internal APIs that will pass the data back and\nforth to and from virtlockd.\n\nSigned-off-by: Michal Privoznik <mprivozn@redhat.com>","distinct":true,"url":"https://api.github.com/repos/zippy2/libvirt/commits/38bb615134410990740b8b0d25d56081fe15be21"},{"sha":"8de00765cfd84e2f9be117bf786cdaf2c06f99cc","author":{"name":"Michal Privoznik","email":"ff52d8b477e4489d0b3b856d550bc61214c6ad4b@redhat.com"},"message":"lock_driver_nop: Implement remember and recall APIs\n\nSigned-off-by: Michal Privoznik <mprivozn@redhat.com>","distinct":true,"url":"https://api.github.com/repos/zippy2/libvirt/commits/8de00765cfd84e2f9be117bf786cdaf2c06f99cc"},{"sha":"5a4c71b2f590e5dec457ccd7241fcdd35613dc4d","author":{"name":"Michal Privoznik","email":"ff52d8b477e4489d0b3b856d550bc61214c6ad4b@redhat.com"},"message":"lock_driver_lockd: Implement remember and recall APIs\n\nSigned-off-by: Michal Privoznik <mprivozn@redhat.com>","distinct":true,"url":"https://api.github.com/repos/zippy2/libvirt/commits/5a4c71b2f590e5dec457ccd7241fcdd35613dc4d"},{"sha":"9e2522539e00dbf1f6c47a2c45785350a74d34bc","author":{"name":"Michal Privoznik","email":"ff52d8b477e4489d0b3b856d550bc61214c6ad4b@redhat.com"},"message":"lock_manager: Implement remember & recall APIs\n\nSigned-off-by: Michal Privoznik <mprivozn@redhat.com>","distinct":true,"url":"https://api.github.com/repos/zippy2/libvirt/commits/9e2522539e00dbf1f6c47a2c45785350a74d34bc"},{"sha":"4b6c2f6cbee831e269d3aedb809034cc12b4b106","author":{"name":"Michal Privoznik","email":"ff52d8b477e4489d0b3b856d550bc61214c6ad4b@redhat.com"},"message":"locking: Favour enum type over int\n\nThis is not a public API where we have to care about size of\ndata types. Moreover, I'll be adding new type to lock soon and it\nwould help if compiler could point on all the locations I need to\nfix.\n\nSigned-off-by: Michal Privoznik <mprivozn@redhat.com>","distinct":true,"url":"https://api.github.com/repos/zippy2/libvirt/commits/4b6c2f6cbee831e269d3aedb809034cc12b4b106"},{"sha":"7744aef80eced17cf89ef0c83640bf3ed65f8135","author":{"name":"Michal Privoznik","email":"ff52d8b477e4489d0b3b856d550bc61214c6ad4b@redhat.com"},"message":"lock_driver: Introduce VIR_LOCK_MANAGER_OBJECT_TYPE_SECLABEL\n\nSigned-off-by: Michal Privoznik <mprivozn@redhat.com>","distinct":true,"url":"https://api.github.com/repos/zippy2/libvirt/commits/7744aef80eced17cf89ef0c83640bf3ed65f8135"},{"sha":"f8db5b74fff49bbf5102a6e5614313b32231a4f9","author":{"name":"Michal Privoznik","email":"ff52d8b477e4489d0b3b856d550bc61214c6ad4b@redhat.com"},"message":"virSecurityManagerNewDAC: Pass locking plugin in\n\nSigned-off-by: Michal Privoznik <mprivozn@redhat.com>","distinct":true,"url":"https://api.github.com/repos/zippy2/libvirt/commits/f8db5b74fff49bbf5102a6e5614313b32231a4f9"},{"sha":"35fe8c783ba99e397cc6e2f2c789f99860efe9de","author":{"name":"Michal Privoznik","email":"ff52d8b477e4489d0b3b856d550bc61214c6ad4b@redhat.com"},"message":"security_dac: Remember security labels\n\nhttps://bugzilla.redhat.com/show_bug.cgi?id=547546\n\nSo now that we have the whole infrastructure prepared, we can\nremember and recall the DAC security labels.\n\nSigned-off-by: Michal Privoznik <mprivozn@redhat.com>","distinct":true,"url":"https://api.github.com/repos/zippy2/libvirt/commits/35fe8c783ba99e397cc6e2f2c789f99860efe9de"},{"sha":"66a8a254e6cb40958bd8a4fcc90f716c437f00f6","author":{"name":"Michal Privoznik","email":"ff52d8b477e4489d0b3b856d550bc61214c6ad4b@redhat.com"},"message":"security_dac: Restore original owner more often\n\nNow that we know what label we should restore and we do have\nreference counter to each seclabel, we restore the original\nseclabel only after the last domain is torn down. Therefore, we\ncan safely try to restore labels even for RO or shared disks. The\nreference counter will take the care of everything.\n\nSigned-off-by: Michal Privoznik <mprivozn@redhat.com>","distinct":true,"url":"https://api.github.com/repos/zippy2/libvirt/commits/66a8a254e6cb40958bd8a4fcc90f716c437f00f6"},{"sha":"81ba6204aa01ad3313c5d4db1415f4f9c767971b","author":{"name":"Michal Privoznik","email":"ff52d8b477e4489d0b3b856d550bc61214c6ad4b@redhat.com"},"message":"security: Introduce virSecurityManagerDomainRestoreDirLabel\n\nThis is a counterpart of virSecurityManagerDomainSetDirLabel.\nWe should restore the security labels on the directories where\nwe've changed them.\n\nSigned-off-by: Michal Privoznik <mprivozn@redhat.com>","distinct":true,"url":"https://api.github.com/repos/zippy2/libvirt/commits/81ba6204aa01ad3313c5d4db1415f4f9c767971b"},{"sha":"8e622f4d3bdca92ed5964949e7ed277e8e5abfd7","author":{"name":"Michal Privoznik","email":"ff52d8b477e4489d0b3b856d550bc61214c6ad4b@redhat.com"},"message":"qemuProcessStop: Restore seclabels on dirs too\n\nThis is a counterpart for f1f68ca33. While we set the security\nlabels on various directories that domain is going to use (e.g.\nchannel target directory) we don't restore the permissions back.\nLeaving a hanging entry in virtlockd.\n\nSigned-off-by: Michal Privoznik <mprivozn@redhat.com>","distinct":true,"url":"https://api.github.com/repos/zippy2/libvirt/commits/8e622f4d3bdca92ed5964949e7ed277e8e5abfd7"}]}
{"actor":{"display_login":"zippy2"}}