Bug 441466
Summary: | SELinux prevents qemu/kvm to use logical volume device | ||
---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Nils Philippsen <nphilipp> |
Component: | selinux-policy | Assignee: | Daniel Walsh <dwalsh> |
Status: | CLOSED NOTABUG | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
Severity: | low | Docs Contact: | |
Priority: | low | ||
Version: | rawhide | CC: | jkubin |
Target Milestone: | --- | Keywords: | Regression |
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2008-04-08 14:19:44 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Nils Philippsen
2008-04-08 09:14:52 UTC
First we do not want to allow a confined qemu to read/write fixed_disk_device_t since it could take over the entire machine. So you have multiple options If you are running qemu manually, you need to stop and restart the qemu after setting setsebool -P allow_unconfined_qemu_transition=0 An alternative would be to set the labeling on the blk_file to virt_image_t chcon -t virt_image_t /PATHTO/vg_gibraltar-lv_kvm_rawhide Which should allow qemu to use only this fixed disk. If you wanted to make this permanant (survive a reboot) semanage fcontext -a -t virt_image_t /PATHTO/vg_gibraltar-lv_kvm_rawhide Cool, thanks for the info. |