[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: [libvirt] [PATCH v2] qemu: Correctly label migration TCP socket passed to qemu



On Thu, Aug 25, 2011 at 18:16:17 +0200, Jiri Denemark wrote:
> ---
> Notes:
>     Version 2:
>     - use virSecurityManagerSetProcessFDLabel instead of
>       virSecurityManagerSetImageFDLabel since the correct label for
>       TCP sockets appears to be svirt_t and not svirt_image_t

Apparently this isn't right either. Relabeling a socket of an already
established connection is not a good idea since it may even break the
connection. I'll post a v3 that labels this in a different way.

Jirka


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]