[Libguestfs] [PATCH 0/7] Fix SELinux security contexts so we can access shared disks (RHBZ#912499).

[Richard W.M. Jones]

https://bugzilla.redhat.com/show_bug.cgi?id=912499
(especially comments 7 & 10)

This patch set is the final fix so that we can access disks in use by
other guests when SELinux and sVirt are enabled.

Previously such disks were inaccessible because sVirt labels the disks
with a random SELinux label to prevent other instances of qemu from
being able to read them.  So naturally the libguestfs appliance
(ie. qemu) cannot read these disks, not even if it is running as root.

The fix is to read that SELinux label from libvirt, then label the
libguestfs appliance the same way, so it can access the disks.

This is done by modifying the guestfs_add_domain call so that it reads
the label from libvirt, and passes the label through to the libvirt
back end which uses it when creating the appliance.  It's actually a
bit more complex than this because we have to label the overlay disks
and the appliance disk correctly.

These patches are only the final part of the whole fix.  I have
already pushed fixes to virt-df and virt-alignment-scan (34e77af1bf +
6e3aab2f0c + several dependent commits) so that these tools now use
just one appliance per guest, allowing us to label that appliance
correctly, because if an appliance is attached to multiple guests then
there is no single label that could be used.

As a result of the total complexity of this fix, I very much doubt
that it can be backported to 1.20.

Rich.