Re: [libvirt] [PATCH] selinux: Fix incorrect file label generation.

2012-08-20 Thread Daniel P. Berrange
On Fri, Aug 17, 2012 at 02:53:29PM +0200, Viktor Mihajlovski wrote: This is an ad-hoc fix for the file label generation. It uses the base context role to determine whether to use the libvirt process context role. If this is object_r we don't touch it. It might be better to add a new flag to

[libvirt] [PATCH] selinux: Fix incorrect file label generation.

2012-08-17 Thread Viktor Mihajlovski
This is an ad-hoc fix for the file label generation. It uses the base context role to determine whether to use the libvirt process context role. If this is object_r we don't touch it. It might be better to add a new flag to virSecuritySELinuxGenNewContext that specifies the context type (process

Re: [libvirt] [PATCH] selinux: Fix incorrect file label generation.

2012-08-17 Thread Osier Yang
On 2012年08月17日 20:53, Viktor Mihajlovski wrote: This is an ad-hoc fix for the file label generation. It uses the base context role to determine whether to use the libvirt process context role. If this is object_r we don't touch it. It might be better to add a new flag to

Re: [libvirt] [PATCH] selinux: Fix incorrect file label generation.

2012-08-17 Thread Eric Blake
On 08/17/2012 08:18 AM, Osier Yang wrote: On 2012年08月17日 20:53, Viktor Mihajlovski wrote: This is an ad-hoc fix for the file label generation. It uses the base context role to determine whether to use the libvirt process context role. If this is object_r we don't touch it. It might be

Re: [libvirt] [PATCH] selinux: Fix incorrect file label generation.

2012-08-17 Thread Viktor Mihajlovski
On 08/17/2012 04:28 PM, Eric Blake wrote: On 08/17/2012 08:18 AM, Osier Yang wrote: On 2012年08月17日 20:53, Viktor Mihajlovski wrote: This is an ad-hoc fix for the file label generation. It uses the base context role to determine whether to use the libvirt process context role. If this is