| Main Archive Page > Month Archives > selinux archives |
libvirt-selinux.patch
From: Daniel J Walsh <dwalsh_at_nospam>Date: Fri May 14 2010 - 20:11:27 GMT
To: Stephen Smalley <sds@tycho.nsa.gov>, Paul Moore <paul.moore@hp.com>, SELinux <selinux@tycho.nsa.gov>, Berrange@redhat.com
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
This is my attempt at getting libvirt to work on an MLS machine.
This patch attempts to take the current context
libvirtcon = "system_u:system_r:virtd_t:SystemLow-SystemHigh"
The the label of the virtual machine
svirtcon = "system_u:system_r:virtd_t:TopSecret"
Create a new context
newcon = "system_u:system_r:virtd_t:TopSecret"
Then call setsockcreatecon(newcon)
Could you guys check the SELinux parts of this and make sure it matches
your expectations.
The patch does not work, because I think something is wrong with
libvirt, it does not call qemuConnectMonitor?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAkvtrm4ACgkQrlYvE4MpobOQ8gCcCeKTKyApgSUwZpfa4M/5XL7y
ucoAoONXiiG22C2oSekqLEnteusxwHsb
=NiF4
-----END PGP SIGNATURE-----
-- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.