[libvirt-users] libvirt_lxc: SELinux MCS

Daniel P. Berrange berrange at redhat.com
Thu Oct 31 16:12:48 UTC 2013


On Thu, Oct 31, 2013 at 05:09:19PM +0100, Matteo Piccinini wrote:
> 
> On Oct 31, 2013, at 5:01 PM, Daniel P. Berrange <berrange at redhat.com> wrote:
> 
> > RHEL-6.4 is too old to have support for SELinxuw with LXC.
> > 
> > Specifically its libselinux lacks the selinux_lxc_contexts_path()
> > method that libvirt requires, hence libvirt will disable its
> > support for SELinux with LXC when built on RHEL-6.4.
> 
> Hi,
> 
> thanks for the answer and for your works, it's possible to enable this
> feature in the Red Hat 6.5 (I'll try the install the beta version ) or
> I need to wait the version 7?

AFAIK, it will be RHEL-7.0 only.

> Eventually do you know if it's possible to compile the libselinux from
> Fedora 19?

I've not tried it, but it might work - you may find you need to update
multiple selinx related packages though - eg policycoreutils and
selinux-policy itself too. There might be other core OS pre-requisites
that RHEL-6 lacks too I'm afraid. You'll just have to see what works...

Daniel
-- 
|: http://berrange.com      -o-    http://www.flickr.com/photos/dberrange/ :|
|: http://libvirt.org              -o-             http://virt-manager.org :|
|: http://autobuild.org       -o-         http://search.cpan.org/~danberr/ :|
|: http://entangle-photo.org       -o-       http://live.gnome.org/gtk-vnc :|




More information about the libvirt-users mailing list