[Ovirt-devel] [PATCH ovirt-node] run storage config script under different selinux context

[Alan Pevec]

REPOST with fixed ovirt-firstboot
ovirt-config-storage needs to access libvirt,
and initscripts run in initrc_t which can't access libvirtd socket
---
 scripts/ovirt-config-setup |    4 +++-
 scripts/ovirt-firstboot    |    2 +-
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/scripts/ovirt-config-setup b/scripts/ovirt-config-setup
index 8408d14..0f53100 100755
--- a/scripts/ovirt-config-setup
+++ b/scripts/ovirt-config-setup
@@ -14,7 +14,9 @@ while true; do
 
         case "$OPTION" in
             "Networking") ovirt-config-networking ; break ;;
-            "Storage")    ovirt-config-storage    ; break ;;
+            "Storage")
+                newrole -t virtd_t -- -c ovirt-config-storage ;
+                break ;;
             "Logging")    ovirt-config-logging    ; break ;;
             "Password")   ovirt-config-password   ; break ;;
             "Quit")       exit 0 ;;
diff --git a/scripts/ovirt-firstboot b/scripts/ovirt-firstboot
index a75319a..a7c88f4 100755
--- a/scripts/ovirt-firstboot
+++ b/scripts/ovirt-firstboot
@@ -31,7 +31,7 @@ start ()
 {
     if is_auto_install; then
         ovirt-config-networking AUTO
-        ovirt-config-storage AUTO
+        newrole -t virtd_t -- -c 'ovirt-config-storage AUTO'
         ovirt-config-logging AUTO
     else
         ovirt-config-setup
-- 
1.5.6.5