]> git.ipfire.org Git - thirdparty/libvirt.git/commit
Add support for LXC specific SELinux configuration
authorDaniel Walsh <dwalsh@redhat.com>
Fri, 11 May 2012 09:54:31 +0000 (10:54 +0100)
committerDaniel P. Berrange <berrange@redhat.com>
Wed, 16 May 2012 09:05:47 +0000 (10:05 +0100)
commit6844ceadb4ec868864901431ae5044223c4c84c4
tree412b2e9055fe5a1d234700f0a940fedb008967b7
parentfa5e68ffbfee0bd012404e842d2b7c1795bf44d9
Add support for LXC specific SELinux configuration

The SELinux policy for LXC uses a different configuration file
than the traditional svirt one. Thus we need to load
/etc/selinux/targeted/contexts/lxc_contexts which contains
something like this:

 process = "system_u:system_r:svirt_lxc_net_t:s0"
 file = "system_u:object_r:svirt_lxc_file_t:s0"
 content = "system_u:object_r:virt_var_lib_t:s0"

cleverly designed to be parsable by virConfPtr

Signed-off-by: Daniel P. Berrange <berrange@redhat.com>
src/security/security_selinux.c