[libvirt] [PATCH 0/3] Improve flexibility of SELinux labelling

Daniel P. Berrange berrange at redhat.com
Mon Jun 27 12:20:35 UTC 2011


This patch series adds two new features

 - The ability to override 'system_u:system_r:svirt_t:s0' from
   /etc/selinux/targeted/contexts/virtual_domain_context using
   the guest XML
 - The ability to use dynamic relabelling of resources, in combo
   with static VM label assignment.

The latter is useful for management applications which want to
be in full control of assigning VM labels (so that they can be
unique across an entire cluster of hosts for example), while
still benefiting from automatic relabelling of resources in the
XML.




More information about the libvir-list mailing list