[libvirt] [PATCH] Make SELinuxSecurityDriverProbe() fail on Fedora 10

Daniel P. Berrange berrange at redhat.com
Thu Apr 16 10:54:08 UTC 2009


On Thu, Apr 16, 2009 at 11:44:48AM +0100, Mark McLoughlin wrote:
> Running "make check" on F10, I get:
> 
>   libvir: Security Labeling error : SELinuxInitialize: cannot open SELinux virtual domain context file /etc/selinux/targeted/contexts/virtual_domain_context: No such file or directory
>   Failed to start security driverFAIL: seclabeltest
> 
> Seems virtual_domain_context isn't available on F10.

IMHO that's a Fedora packaging bug. We already probe for the presence
fo the selinux_virtual_domain_context_path() method, which didn't exist
in Fedora 10. So if that method has now appeared, but without the 
files it requires in order to work that seems like a policy bug to me.

Daniel
-- 
|: Red Hat, Engineering, London   -o-   http://people.redhat.com/berrange/ :|
|: http://libvirt.org  -o-  http://virt-manager.org  -o-  http://ovirt.org :|
|: http://autobuild.org       -o-         http://search.cpan.org/~danberr/ :|
|: GnuPG: 7D3B9505  -o-  F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505 :|




More information about the libvir-list mailing list