[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

[libvirt] [PATCH 0/3] Improve flexibility of SELinux labelling



This patch series adds two new features

 - The ability to override 'system_u:system_r:svirt_t:s0' from
   /etc/selinux/targeted/contexts/virtual_domain_context using
   the guest XML
 - The ability to use dynamic relabelling of resources, in combo
   with static VM label assignment.

The latter is useful for management applications which want to
be in full control of assigning VM labels (so that they can be
unique across an entire cluster of hosts for example), while
still benefiting from automatic relabelling of resources in the
XML.


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]