Re: [libvirt] [PATCH] qemu: ensure FDs passed to QEMU for chardevs have correct SELinux labels

2018-06-24 Thread Laine Stump
On 06/22/2018 05:56 AM, Daniel P. Berrangé wrote: > The UNIX socket FDs were we passing to QEMU inherited a label based on > libvirtd's context. QEMU is thus denied ability to access the UNIX > socket. We need to use the security manager to change our current > context temporarily when creating

[libvirt] [PATCH] qemu: ensure FDs passed to QEMU for chardevs have correct SELinux labels

2018-06-22 Thread Daniel P . Berrangé
The UNIX socket FDs were we passing to QEMU inherited a label based on libvirtd's context. QEMU is thus denied ability to access the UNIX socket. We need to use the security manager to change our current context temporarily when creating the UNIX socket FD. Signed-off-by: Daniel P. Berrangé ---