Bug 696292

Summary: RFE: svirt: add a mechanism to specify security level and range of MCS labels
Product: [Community] Virtualization Tools Reporter: Daniel Walsh <dwalsh>
Component: libvirtAssignee: Libvirt Maintainers <libvirt-maint>
Status: CLOSED DEFERRED QA Contact:
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: unspecifiedCC: berrange, clalance, crobinso, itamar, jforbes, laine, rbalakri, rcvalle, veillard, virt-maint
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-03-23 12:34:25 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Daniel Walsh 2011-04-13 19:07:45 UTC 
We have been having conversations about running a dynamic svirt on top of an MLS machine.  The idea would be to carve out a range of MCS labels that would be safe to use for virtual machines and then have the rest of categories used by MLS.

I would suggest we just put something like  this in to the /etc/libvirt/libvirtd.conf 

Sensitivity: s0
MCSRange: 0-1023
Comment 1 Ramon de Carvalho Valle 2011-04-18 17:25:03 UTC 
For further reference:
http://marc.info/?t=130245618900003&r=1&w=2
Comment 2 Fedora Admin XMLRPC Client 2011-09-22 17:49:39 UTC 
This package has changed ownership in the Fedora Package Database.  Reassigning to the new owner of this component.
Comment 3 Fedora Admin XMLRPC Client 2011-09-22 17:52:37 UTC 
This package has changed ownership in the Fedora Package Database.  Reassigning to the new owner of this component.
Comment 4 Fedora Admin XMLRPC Client 2011-09-22 17:57:45 UTC 
This package has changed ownership in the Fedora Package Database.  Reassigning to the new owner of this component.
Comment 5 Fedora Admin XMLRPC Client 2011-11-30 19:30:21 UTC 
This package has changed ownership in the Fedora Package Database.  Reassigning to the new owner of this component.
Comment 6 Fedora Admin XMLRPC Client 2011-11-30 19:34:04 UTC 
This package has changed ownership in the Fedora Package Database.  Reassigning to the new owner of this component.
Comment 7 Fedora Admin XMLRPC Client 2011-11-30 19:40:28 UTC 
This package has changed ownership in the Fedora Package Database.  Reassigning to the new owner of this component.
Comment 8 Fedora Admin XMLRPC Client 2011-11-30 19:51:38 UTC 
This package has changed ownership in the Fedora Package Database.  Reassigning to the new owner of this component.
Comment 9 Cole Robinson 2012-06-07 14:09:50 UTC 
Moving to upstream tracker
Comment 10 Cole Robinson 2016-03-23 12:34:25 UTC 
This never happened, and I don't think it's tracked anywhere else. An extension like this probably needs to be pushed by an explicit requirement from the RHEL side before someone actually implements. Closing as DEFERRED until that exists