Re: [libvirt] Does libvirt check MCS labels during hot-add disk image ?

2012-03-22 Thread Daniel P. Berrange
On Thu, Mar 22, 2012 at 09:36:30AM +0530, Onkar N Mahajan wrote: > Libvirt doesn't care about security during hot add disk images. It even > accepts addition of disk images of other guest running on the host. > > Steps followed to create this scenario : > Now, try to add vm1's disk image into

[libvirt] Does libvirt check MCS labels during hot-add disk image ?

2012-03-21 Thread Onkar N Mahajan
Libvirt doesn't care about security during hot add disk images. It even accepts addition of disk images of other guest running on the host. Steps followed to create this scenario : Started two VMs with following security configurations: vm1: system_u:system_r:svirt_t:s0:c219,c564 sys