[Ovirt-devel] [PATCH ovirt-node] run storage config script under different selinux context

Alan Pevec apevec at redhat.com
Thu Nov 20 16:17:25 UTC 2008


ovirt-config-storage needs to access libvirt,
and initscripts run in initrc_t which can't access libvirtd socket
---
 scripts/ovirt-config-setup |    4 +++-
 scripts/ovirt-firstboot    |    1 +
 2 files changed, 4 insertions(+), 1 deletions(-)

diff --git a/scripts/ovirt-config-setup b/scripts/ovirt-config-setup
index 8408d14..0f53100 100755
--- a/scripts/ovirt-config-setup
+++ b/scripts/ovirt-config-setup
@@ -14,7 +14,9 @@ while true; do
 
         case "$OPTION" in
             "Networking") ovirt-config-networking ; break ;;
-            "Storage")    ovirt-config-storage    ; break ;;
+            "Storage")
+                newrole -t virtd_t -- -c ovirt-config-storage ;
+                break ;;
             "Logging")    ovirt-config-logging    ; break ;;
             "Password")   ovirt-config-password   ; break ;;
             "Quit")       exit 0 ;;
diff --git a/scripts/ovirt-firstboot b/scripts/ovirt-firstboot
index a75319a..dcb1b43 100755
--- a/scripts/ovirt-firstboot
+++ b/scripts/ovirt-firstboot
@@ -32,6 +32,7 @@ start ()
     if is_auto_install; then
         ovirt-config-networking AUTO
         ovirt-config-storage AUTO
+        newrole -t virtd_t -- -c 'ovirt-config-storage AUTO'
         ovirt-config-logging AUTO
     else
         ovirt-config-setup
-- 
1.5.6.5




More information about the ovirt-devel mailing list