Bug 479857

Summary:	SELinux prevents save of kvm machine
Product:	[Fedora] Fedora	Reporter:	Guy Andrews <gja2>
Component:	kvm	Assignee:	Glauber Costa <gcosta>
Status:	CLOSED DUPLICATE	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	medium	Docs Contact:
Priority:	low
Version:	10	CC:	berrange, clalance, gcosta, markmc, quintela, virt-maint
Target Milestone:	---
Target Release:	---
Hardware:	x86_64
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2009-05-12 20:31:23 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Guy Andrews 2009-01-13 16:55:49 UTC

Description of problem: SELinux is preventing qemu-kvm (qemu_t) "read" to sh (bin_t)
"restorecon -v 'sh'" does not prevent the error


Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1. Build XP and update as a virtual machine.
2. Run virtual machine using "Virtual Machine Manager"
3. Use save option to save in /var/lib/libvirt or /var/lib/libvirt/images
  
Actual results: SELinux prevents read access to the shell script


Expected results: Virtual Machine saved


Additional info: The virtual machine hangs and the save does not complete

Comment 1 Daniel Berrangé 2009-05-12 20:31:23 UTC

I realize this bug was reported against Fedora 10, however, it is not practical to fix this problem with SELinux + save/restore in libvirt at this time. We have a planned change of the way we deal with save/restore in libvirt which will address it properly. Thus I'm closing this as a dup of the bug tracking that future enhancement.

*** This bug has been marked as a duplicate of bug 498750 ***