[libvirt] [PATCH v3 0/3] Correctly label migration TCP socket
Jiri Denemark
jdenemar at redhat.com
Fri Aug 26 11:52:41 UTC 2011
On Fri, Aug 26, 2011 at 10:23:45 +0200, Jiri Denemark wrote:
> With current libvirt and qemu, migration is not working if SELinux is in
> enforcing mode, since the TCP socket we pass to qemu is not labeled in a way
> that would allow qemu to read from it.
>
> After this patchset, migration works even in enforcing mode.
>
> Jiri Denemark (3):
> security: Rename SetSocketLabel APIs to SetDaemonSocketLabel
> security: Introduce SetSocketLabel
> qemu: Correctly label migration TCP socket
Oops, thanks for spotting the missing part in apparmor driver. I fixed that
(and installed libapparmor and compile-tested libvirt with it) and pushed the
series.
Jirka
More information about the libvir-list
mailing list