[libvirt] [PATCH v2] qemu: Correctly label migration TCP socket passed to qemu
Jiri Denemark
jdenemar at redhat.com
Thu Aug 25 19:12:20 UTC 2011
On Thu, Aug 25, 2011 at 18:16:17 +0200, Jiri Denemark wrote:
> ---
> Notes:
> Version 2:
> - use virSecurityManagerSetProcessFDLabel instead of
> virSecurityManagerSetImageFDLabel since the correct label for
> TCP sockets appears to be svirt_t and not svirt_image_t
Apparently this isn't right either. Relabeling a socket of an already
established connection is not a good idea since it may even break the
connection. I'll post a v3 that labels this in a different way.
Jirka
More information about the libvir-list
mailing list