[libvirt] [sandbox PATCH 1/5] Add virt-sandbox -s inherit, to execute the sandbox from the parent.

Daniel P. Berrange berrange at redhat.com
Thu Aug 15 12:11:47 UTC 2013


On Thu, Aug 15, 2013 at 08:04:41AM -0400, Dan Walsh wrote:
> This will allow us to run sandbox as the calling process,  If I am
> running a shell as staff_u:unconfined_r:unconfined_t:s0, and I
> execute virt-sandbox -c lxc/// -- /bin/sh
> 
> /bin/sh will run as staff_u:unconfined_r:unconfined_t:s0
> ---
>  bin/virt-sandbox.c                       |  4 ++++
>  configure.ac                             |  1 +
>  libvirt-sandbox.spec.in                  |  1 +
>  libvirt-sandbox/Makefile.am              |  2 ++
>  libvirt-sandbox/libvirt-sandbox-config.c | 14 ++++++++++++++
>  m4/virt-selinux.m4                       | 11 +++++++++++
>  6 files changed, 33 insertions(+)
>  create mode 100644 m4/virt-selinux.m4

ACK

Daniel
-- 
|: http://berrange.com      -o-    http://www.flickr.com/photos/dberrange/ :|
|: http://libvirt.org              -o-             http://virt-manager.org :|
|: http://autobuild.org       -o-         http://search.cpan.org/~danberr/ :|
|: http://entangle-photo.org       -o-       http://live.gnome.org/gtk-vnc :|




More information about the libvir-list mailing list