rpm/libvirt
SHA256
1
0
Fork 0
forked from pool/libvirt
Code Pull Requests Activity
442 Commits 2 Branches 0 Tags 17 MiB
7405b879a5
Commit Graph

387 Commits

Author SHA256 Message Date
James Fehlig
7405b879a5 - libxl: advertise system qemu instead of qemu-xen in caps 
libxl-qemu-emulator-caps.patch
  FATE#320638

OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=514
 2016-03-03 22:44:56 +00:00
James Fehlig
89b02a08bc Accepting request 363743 from home:jfehlig:branches:Virtualization 
- Update to libvirt 1.3.2
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html

OBS-URL: https://build.opensuse.org/request/show/363743
OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=512
 2016-03-01 17:58:15 +00:00
James Fehlig
83ea398b7d The openSUSE Xen package provides and supports several block-* 
scripts. libvirt should support them too.

- libxl: Add support for block-{dmmd,drbd,npiv} scripts
  libxl-support-block-script.patch
  bsc#954872

OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=511
 2016-02-23 22:12:48 +00:00
James Fehlig
ead8cd12f9 Accepting request 356399 from home:jfehlig:branches:Virtualization 
- qemu: set /usr/share/qemu/ovmf-x86_64-ms-{code,vars}.bin as
  default UEFI firmwares for x86_64
  bsc#961853

OBS-URL: https://build.opensuse.org/request/show/356399
OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=509
 2016-01-27 22:57:49 +00:00
James Fehlig
fe8f4e8203 Accepting request 354651 from home:jfehlig:branches:Virtualization 
- Update to libvirt 1.3.1
  - CVE-2015-5313
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches: 034e47c3-CVE-2015-5313.patch,
    ace1ee22-qemuxml2argv-test.patch, add-with-login-shell.patch,
    virt-aa-helper-rw-mounts.patch

OBS-URL: https://build.opensuse.org/request/show/354651
OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=508
 2016-01-18 19:32:30 +00:00
James Fehlig
7d7161c99c In an upgrade scenario we must explicitly enable virtlockd/virtlogd 
sockets, if libvirtd is already enabled and start them if
libvirtd is running, otherwise the qemu driver will fail to start
guests.

- spec: perform one-time enable and start of virtlogd.socket when
  upgrading from libvirt < 1.3.0. Inspired by upstream libvirt.git
  commit da054f35.

OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=506
 2015-12-22 02:31:20 +00:00
James Fehlig
938f073a9b Accepting request 349565 from home:jfehlig:branches:Virtualization 
- CVE-2015-5313: don't allow '/' in filesystem volume names
  034e47c3-CVE-2015-5313.patch
  bsc#953110
- Fix failing qemuxml2argv test on 32-bit platforms
  ace1ee22-qemuxml2argv-test.patch

- Update to libvirt 1.3.0
  - New virtlogd log daemon
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patch: 703ec1b7-qemu-bridge-helper-fix.patch
  - Added patch: virtlogd-init-script.patch

OBS-URL: https://build.opensuse.org/request/show/349565
OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=505
 2015-12-18 21:01:20 +00:00
Cédric Bosdonnat
978f12dfb9 Accepting request 347309 from home:cbosdonnat:branches:Virtualization 
- Run udevadm settle after removing NICs in lxc driver.
  bsc#829033. lxc-wait-after-eth-del.patch

OBS-URL: https://build.opensuse.org/request/show/347309
OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=503
 2015-12-04 08:54:48 +00:00
Cédric Bosdonnat
62997836cc Accepting request 344925 from home:cbosdonnat:branches:Virtualization 
- Don't add apparmor deny rw rule for 9P readonly mounts.
  bsc#952849. virt-aa-helper-rw-mounts.patch

OBS-URL: https://build.opensuse.org/request/show/344925
OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=501
 2015-11-17 15:45:23 +00:00
Cédric Bosdonnat
ac30e132c5 Accepting request 343283 from home:cbosdonnat:branches:Virtualization 
- Don't package virt-login-shell anymore as shipping it as
  non-setuid doesn't make sense. bsc#837609
  add-with-login-shell.patch

OBS-URL: https://build.opensuse.org/request/show/343283
OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=499
 2015-11-09 23:51:50 +00:00
James Fehlig
7012e84cf0 Accepting request 342482 from home:jfehlig:branches:Virtualization 
- Detect path of qemu-bridge-helper during %configure
  - add qemu-tools as BuildRequires for suse_version > 1130
  - add upstream patch 703ec1b7-qemu-bridge-helper-fix.patch

- Update to libvirt 1.2.21
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    disable-virCgroupGetPercpuStats-test.patch

- spec: some minor wireshark fixups. Essentially a backport of
  commit 7c8250d7.

OBS-URL: https://build.opensuse.org/request/show/342482
OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=497
 2015-11-05 00:23:08 +00:00
Cédric Bosdonnat
048cb10d28 Accepting request 339223 from home:cbosdonnat:branches:Virtualization 
- spec: remove all dependencies on apparmor to keep it optional.
  bsc#949793

OBS-URL: https://build.opensuse.org/request/show/339223
OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=495
 2015-10-16 09:13:56 +00:00
James Fehlig
d1058d1ec0 Add an old SLE12 bug fix to Factory/Tumbleweed 
OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=494
 2015-10-13 17:02:37 +00:00
James Fehlig
5735dde32d - spec: the libvirt apparmor profiles #include files from the 
apparmor-profiles package, thus should have a dependency on it
  bsc#949793

OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=492
 2015-10-09 17:21:22 +00:00
James Fehlig
de9b140cb2 Accepting request 335994 from home:jfehlig:branches:Virtualization 
- Update to libvirt 1.2.20
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped upstream patches:
    3468542f-virFileUnlink.patch,
    8b1d84e6-refreshVol-failure.patch,
    e0025d29-storage-mode-check.patch,
    ba25c214-libxl-log-level.patch,
    56945e13-libxl-AttachDeviceConfig-hostdev.patch

OBS-URL: https://build.opensuse.org/request/show/335994
OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=490
 2015-10-02 20:23:01 +00:00
James Fehlig
5353c641ca Add a SLE12 SP1 bug fix to the Factory libvirt package. 
- bsc#945962: SLES12 SP1 Beta3 - Pass-through NIC device via virsh
  not available to VM.
  56945e13-libxl-AttachDeviceConfig-hostdev.patch

OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=488
 2015-09-17 15:45:05 +00:00
James Fehlig
d7a1722cf4 - libxl: set driver log level to the log_level specified in 
libvirtd.conf
  ba25c214-libxl-log-level.patch
  bsc#945796

OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=486
 2015-09-15 17:45:03 +00:00
Cédric Bosdonnat
ee07210d25 Accepting request 330855 from home:cbosdonnat:branches:Virtualization 
- CVE-2015-5247 - denial of service through root-squash NFS storage
  3468542f-virFileUnlink.patch
  8b1d84e6-refreshVol-failure.patch
  e0025d29-storage-mode-check.patch

OBS-URL: https://build.opensuse.org/request/show/330855
OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=484
 2015-09-14 08:45:45 +00:00
James Fehlig
9c26a2274f Accepting request 328678 from home:jfehlig:branches:Virtualization 
- Update to libvirt 1.2.19
  - Improved ppc64 support
  - New virDomainRename API
  - Support for new QEMU pci emulations
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped upstream patches:
    269d39af-storage-allocation-fix.patch,
    26c5fa3a-virt-aa-helper-missing-doc.patch,
    d25a5e08-virt-aa-helper-simplify-restriction-logic.patch,
    2f01cfdf-virt-aa-helper-allow-ovmf.patch,
    91fdcefa-virt-aa-helper-allow-nvram.patch,
    52970dec-virt-aa-helper-improve-valid-path.patch,
    44a54eb0-libxl-fix-refcnt-MigrationDstArgs.patch,
    15120b8c-libxl-no-resume-on-suspend-fail.patch,
    e80b84a7-libxl-acquire-job-on-migrate.patch,
    60acb38-revert-curmem-inactive-dom.patch

OBS-URL: https://build.opensuse.org/request/show/328678
OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=481
 2015-09-02 15:27:32 +00:00
James Fehlig
8af0df1210 Accepting request 327805 from home:jfehlig:branches:Virtualization 
Add fixes from SLE12 SP1 to Factory libvirt package.

- Replace local libxl patches with upstream variants
  Dropped:
  0003-libxl-fix-ref-counting-of-libxlMigrationDstArgs.patch
  0004-libxl-don-t-attempt-to-resume-domain-when-suspend-fa.patch
  0005-libxl-acquire-a-job-when-receiving-a-migrating-domai.patch
  Added:
  44a54eb0-libxl-fix-refcnt-MigrationDstArgs.patch
  15120b8c-libxl-no-resume-on-suspend-fail.patch
  e80b84a7-libxl-acquire-job-on-migrate.patch
  bsc#936185
- Added another virt-aa-helper upstream patch
  52970dec-virt-aa-helper-improve-valid-path.patch
  lp#1483071
- Added upstream patch to fix libvirt-tck memory balloon test
  failure on Xen
  60acb38-revert-curmem-inactive-dom.patch

- Fix generated apparmor profile to allow access to ovmf and nvram.
  26c5fa3a-virt-aa-helper-missing-doc.patch
  2f01cfdf-virt-aa-helper-allow-ovmf.patch
  91fdcefa-virt-aa-helper-allow-nvram.patch
  d25a5e08-virt-aa-helper-simplify-restriction-logic.patch
  lp#1483071

OBS-URL: https://build.opensuse.org/request/show/327805
OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=479
 2015-08-28 20:30:35 +00:00
James Fehlig
f2f3308233 - storage: only run safezero if allocation is > 0 
269d39af-storage-allocation-fix.patch
  bsc#942085

OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=477
 2015-08-24 16:33:48 +00:00
James Fehlig
379397c0f7 Accepting request 320420 from home:jfehlig:branches:Virtualization 
- Update to libvirt 1.2.18
  - libxl: support dom0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped upstream patches:
    e44bcae-virt-aa-helper-trailing-slash.patch,
    a55a5e7-virt-aa-helper-log.patch,
    61dab0f-virt-aa-helper-renaming.patch,
    24f3c2f-virt-aa-helper-fix-caps.patch,
    45697fe5-libxl-support-dom0.patch,
    e9c27344-libxl-fix-virDomainObj-state.patch,
    4ffb21c8-libxl-dom0-state-fix.patch,
    qemu-nbd-cleanup-fix.patch

OBS-URL: https://build.opensuse.org/request/show/320420
OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=475
 2015-08-04 15:13:51 +00:00
James Fehlig
dd862584c2 Add fix for bsc#936185 to Factory 
OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=473
 2015-07-31 18:53:33 +00:00
James Fehlig
2f5a2436b0 Add libxl driver fixes from SLE12 SP1 work. 
- libxl: set dom0 state to running
  4ffb21c8-libxl-dom0-state-fix.patch
  bsc#937316
- libxl: support management of dom0
  45697fe5-libxl-support-dom0.patch
  bsc#937316
- libxl: libxl: fix setting state of virDomainObj
  e9c27344-libxl-fix-virDomainObj-state.patch
  bsc#934937

OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=471
 2015-07-10 18:38:45 +00:00
Cédric Bosdonnat
37e0137a03 Accepting request 315860 from home:cbosdonnat:branches:Virtualization 
Tue Jul  10 13:29:51 UTC 2015 - cbosdonnat@suse.com
- Fixed virt-aa-helper bugs preventing virt-sandbox to work.
  24f3c2f-virt-aa-helper-fix-caps.patch
  61dab0f-virt-aa-helper-renaming.patch
  a55a5e7-virt-aa-helper-log.patch
  e44bcae-virt-aa-helper-trailing-slash.patch
  bsc#936841
- Fixed crasher due to uninitialized values
  qemu-nbd-cleanup-fix.patch bsc#936841

OBS-URL: https://build.opensuse.org/request/show/315860
OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=470
 2015-07-10 12:21:25 +00:00
James Fehlig
57e1254dfd Accepting request 314914 from home:jfehlig:branches:Virtualization 
- Update to libvirt 1.2.17
  - parallels driver renamed to vz (Virtuozzo)
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
- spec: re-enable tests that have received upstream fixes and
  are now passing

OBS-URL: https://build.opensuse.org/request/show/314914
OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=468
 2015-07-02 22:10:14 +00:00
James Fehlig
8720257f58 add missing BuildRequires for systemd pkgconfig file 
OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=466
 2015-06-03 17:36:37 +00:00
James Fehlig
4e3feede94 - Remove unsupported settings in libvirtd.socket unit file when 
systemd version < 214
  libvirtd-systemd-socket.patch
  bsc#933043
- spec: always apply Apparmor and netcontrol patches

OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=465
 2015-06-03 17:34:40 +00:00
James Fehlig
55164a402d - spec: Add libvirtd.socket unit file to service_add_pre and 
service_del_postun macros

OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=464
 2015-06-02 15:30:34 +00:00
James Fehlig
0813eec6fe Accepting request 309688 from home:jfehlig:branches:Virtualization 
- Update to libvirt 1.2.16
  - Introduce pci-serial
  - Introduce virDomainSetUserPassword API
  - Introduce protected key mgmt ops
  - Add domain vmport feature
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Drop upstream patches c0d3f608-libxl-soundhw.patch and
    8910e063-arch-caps.patch
  - Drop polkit-10-virt.rules in favor of upstream 50-libvirt.rules

OBS-URL: https://build.opensuse.org/request/show/309688
OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=463
 2015-06-01 17:48:26 +00:00
James Fehlig
29b2859f80 Fix a qemu regression found by Duncan. 
- qemu: fix regression defaulting to host arch
  8910e063-arch-caps.patch
  rhb#1219191

OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=461
 2015-05-20 18:55:09 +00:00
James Fehlig
8c47289013 Accepting request 305630 from home:jfehlig:branches:Virtualization 
Minor spec file adjustments:

- spec: build libxl driver for aarch64 and remove useless
  'suse_version <= 1220' conditional

OBS-URL: https://build.opensuse.org/request/show/305630
OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=459
 2015-05-06 17:54:05 +00:00
James Fehlig
de80dc9cf2 - libxl: support virtual sound devices in HVM domains 
c0d3f608-libxl-soundhw.patch
  bsc#875216

OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=457
 2015-05-05 15:48:11 +00:00
James Fehlig
8fa113bc65 Accepting request 305342 from home:jfehlig:branches:Virtualization 
- Update to libvirt 1.2.15
  - Implement virDomainAddIOThread and virDomainDelIOThread
  - libxl: Introduce configuration file for libxl driver
  - Add VIR_DOMAIN_EVENT_ID_DEVICE_ADDED event
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Drop upstream patches da33a1ac-lxc-init-statedir.patch and
    open-ns-files-readonly.patch
- spec file fixups for building --without-driver-modules

OBS-URL: https://build.opensuse.org/request/show/305342
OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=456
 2015-05-04 16:52:19 +00:00
Cédric Bosdonnat
5879925aff Accepting request 298239 from home:cbosdonnat:branches:Virtualization 
- boo#926765: add libvirt-daemon-driver-qemu dependency on
  libvirt-daemon-driver-storage.

OBS-URL: https://build.opensuse.org/request/show/298239
OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=453
 2015-04-20 18:17:37 +00:00
Cédric Bosdonnat
5d8a863e03 Accepting request 295136 from home:cbosdonnat:branches:Virtualization 
- boo#926153: make sure /var/run/libvirt/lxc folder exists when
  starting the driver. da33a1ac-lxc-init-statedir.patch
- Fix lxc-enter-namespace for 3.19+ kernels.
  open-ns-files-readonly.patch

OBS-URL: https://build.opensuse.org/request/show/295136
OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=451
 2015-04-09 10:08:11 +00:00
James Fehlig
563e94d4f8 Accepting request 294211 from home:jfehlig:branches:Virtualization 
- Disable building wireshark dissector.  Commit 37397320
  requires wireshark pkgconfig, which SUSE wireshark packages
  do not provide.
- Disable building the legacy Xen driver since Xen no longer
  provides the xend toolstack.  Remove xend-specific patches
  while at it: fix-pci-attach-xen-driver.patch,
  xen-name-for-devid.patch

- Update to libvirt 1.2.14
  - qemu: Implement memory device hotplug
  - Implement public API for virDomainPinIOThread
  - Implement public API for virDomainGetIOThreadsInfo
  - SRIOV NIC offload feature discovery
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Drop disable-hugepage-test.patch in favor of upstream fix

- Fix build on older distros containing a polkit package that lacks
  support for /etc/polkit-1/rules.d drop directory

OBS-URL: https://build.opensuse.org/request/show/294211
OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=450
 2015-04-02 16:20:09 +00:00
James Fehlig
44a71b3a3e Accepting request 291007 from home:flavio_castelli:branches:Virtualization 
- Instruct polkit to allow memebers of the 'libvirt' group to connect
  to libvirt without providing any password (bnc#920804)
- Added polkit-10-virt.rules to fix bnc#920804

OBS-URL: https://build.opensuse.org/request/show/291007
OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=444
 2015-03-16 16:59:15 +00:00
James Fehlig
168a353639 - Change default setting of security_default_confined in 
/etc/libvirt/qemu.conf instead of in code.  Making the change in
  code changes the default behavior for all users, even those that
  have a custom security setup in their /etc/libvirt/qemu.conf.
  Modified suse-qemu-conf.patch

OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=442
 2015-03-11 15:35:20 +00:00
James Fehlig
7eedb34aa2 - Fixed a number of QEMU apparmor abstraction problems. bsc#921355 
apparmor-fixes.patch

OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=441
 2015-03-11 04:41:55 +00:00
James Fehlig
b625df8512 Accepting request 288564 from home:jfehlig:branches:Virtualization 
- Update to libvirt 1.2.13
  - qemu: improved support for host and guest NUMA
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html

OBS-URL: https://build.opensuse.org/request/show/288564
OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=439
 2015-03-02 20:13:45 +00:00
James Fehlig
919b8be388 Accepting request 283071 from home:jfehlig:branches:Virtualization 
- Update to libvirt 1.2.12
  - CVE-2015-0236: qemu: Check ACLs when dumping security info
    from snapshots
  - CVE-2015-0236: qemu: Check ACLs when dumping security info
    from save image
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Drop upstream patches: 30c6aecc-apparmor-lib64.patch,
    apparmor-xen-fixup.patch, apparmor-allow-helpers.patch,
    apparmor-tck-raw-packets.patch
  - Disable a hugepage test that is failing on ppc, ppc64, and
    ppc64le architectures - disable-hugepage-test.patch

OBS-URL: https://build.opensuse.org/request/show/283071
OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=437
 2015-01-28 04:12:58 +00:00
Cédric Bosdonnat
9ae36308d4 Accepting request 282003 from home:mlatimer:branches:Virtualization 
- Apparmor profile regression breaks Xen domains. bsc#913799
  apparmor-xen-fixup.patch
  apparmor-allow-helpers.patch
  apparmor-tck-raw-packets.patch

OBS-URL: https://build.opensuse.org/request/show/282003
OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=434
 2015-01-20 08:09:54 +00:00
Cédric Bosdonnat
944b1122db Accepting request 279988 from home:cbosdonnat:branches:Virtualization 
- Replaced hard to maintain install-apparmor-profiles.patch
  by upstreamed 30c6aecc-apparmor-lib64.patch.
- Reformatted libvirt.spec and libvirtd.init to pass upstream make
  syntax-check

OBS-URL: https://build.opensuse.org/request/show/279988
OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=432
 2015-01-05 20:14:57 +00:00
Cédric Bosdonnat
8082129d0c Accepting request 265250 from home:cbosdonnat:branches:Virtualization 
- Update to libvirt 1.2.11
  - Implement public API for virDomainGetFSInfo
  - qemu: Add define for the new throttle options
  - CVE-2014-8131: Fix possible deadlock and segfault in qemuConnectGetAllDomainStats()
  - CVE-2014-7823: dumpxml: security hole with migratable flag
- Drop upstream patches: 2222123-virt-aa-helper-crash.patch,
  433b427-iplink-name.patch,
  52691f99-qemu-mig-crash.patch,
  72fecf1-lxc-resolve-symlinks.patch,
  b1674ad5-CVE-2014-7823.patch,
  ba9b7252-sys-net-rw.patch,
  c264eea-virt-aa-helper-sandbox.patch,
  e50457d-lxc-unmount-check.patch,
  cgroup-all-devices.patch,
  libvirt-ppc64le-support.patch

OBS-URL: https://build.opensuse.org/request/show/265250
OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=428
 2014-12-15 14:16:23 +00:00
Cédric Bosdonnat
06949b0f82 Accepting request 264662 from home:cbosdonnat:branches:Virtualization 
- Get /proc/sys/net/ipv[46] read-write for wicked to work in
  containers. bsc#904432. ba9b7252-sys-net-rw.patch
- Fixed allowing devices for containers.
  cgroup-all-devices.patch

OBS-URL: https://build.opensuse.org/request/show/264662
OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=426
 2014-12-10 14:19:10 +00:00
James Fehlig
69a5f4bf9f - qemu: Fix crash in tunnelled migration 
52691f99-qemu-mig-crash.patch
  boo#908008

OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=424
 2014-12-03 12:25:32 +00:00
Cédric Bosdonnat
d6a22feac8 Accepting request 262985 from home:cbosdonnat:branches:Virtualization 
- Fix potential crasher in virt-aa-helper
  2222123-virt-aa-helper-crash.patch
- ip link add now needs the 'name' parameter.
  433b427-iplink-name.patch
- Fixes for virt-sandbox-service to work:
  - Allow adding virt-sandbox service config to apparmor rules.
    c264eea-virt-aa-helper-sandbox.patch
  - fix symlink resolving for containers to start.
    72fecf1-lxc-resolve-symlinks.patch
  - fix unmounting file system if it contains the source to mount.
    e50457d-lxc-unmount-check.patch

- Remove security_driver = "none" in qemu config. This completely
  disabled all security drivers instead of probing them.
- Changed default value of QEMU's security_default_confined to 0 to
  keep QEMU domains unconfined by default.

OBS-URL: https://build.opensuse.org/request/show/262985
OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=422
 2014-11-25 13:41:55 +00:00
Cédric Bosdonnat
dd4dfc896b Accepting request 262066 from home:cbosdonnat:branches:Virtualization 
- Fix Qemu AppArmor abstraction.
  - qemu-block.so was denied on x86_64. install-apparmor-profiles.patch
  - Temporary fix access to screenshot temporary file. bsc#904426.
    qemu-apparmor-screenshot.patch

OBS-URL: https://build.opensuse.org/request/show/262066
OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=420
 2014-11-17 17:17:05 +00:00
James Fehlig
d97b2f8ea8 - CVE-2014-7823: dumpxml: security hole with migratable flag 
b1674ad5-CVE-2014-7823.patch
  bsc#904176

OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=418
 2014-11-11 05:03:23 +00:00