[libvirt] [PATCH v2] qemu: Correctly label migration TCP socket passed to qemu

Jiri Denemark jdenemar at redhat.com
Thu Aug 25 19:12:20 UTC 2011


On Thu, Aug 25, 2011 at 18:16:17 +0200, Jiri Denemark wrote:
> ---
> Notes:
>     Version 2:
>     - use virSecurityManagerSetProcessFDLabel instead of
>       virSecurityManagerSetImageFDLabel since the correct label for
>       TCP sockets appears to be svirt_t and not svirt_image_t

Apparently this isn't right either. Relabeling a socket of an already
established connection is not a good idea since it may even break the
connection. I'll post a v3 that labels this in a different way.

Jirka




More information about the libvir-list mailing list