[libvirt] [PATCH v10 0/7] file descriptor passing using fd sets

2012-08-13 Thread Corey Bryant
libvirt's sVirt security driver provides SELinux MAC isolation for Qemu guest processes and their corresponding image files. In other words, sVirt uses SELinux to prevent a QEMU process from opening files that do not belong to it. sVirt provides this support by labeling guests and resources with

Re: [libvirt] [PATCH v10 0/7] file descriptor passing using fd sets

2012-08-13 Thread Eric Blake
On 08/13/2012 08:08 AM, Corey Bryant wrote: libvirt's sVirt security driver provides SELinux MAC isolation for Qemu guest processes and their corresponding image files. In other words, sVirt uses SELinux to prevent a QEMU process from opening files that do not belong to it. Corey Bryant