Please extend all selinux policy to label ~/.local/share/libvirt/images and ~/.local/share/libvirt/boot as svirt_home_t. This is similar to what is done with ~/.local/share/gnome-boxes/images and ~/VirtualMachines (the latter uses virt_home_t but likely only because it predates svirt)
virt-manager uses the latter for user libvirtd sessions, but creating a top level $HOME directory is annoying and out of fashion these days, so I'd like to switch to .local/share/libvirt/images. That path is also sufficiently generic that other apps could use as well.
With libvirt doing the labelling these days I don't know how much the static labels matter, maybe if user turns off svirt it still plays a roll? But I'm sure you guys no best.
Please consider adding this to fedora 21+. Thanks!
Author: Miroslav Grepl <email@example.com>
Date: Tue May 12 10:44:38 2015 +0200
Add support for ~/.local/share/libvirt/images and for ~/.local/share/libvirt/boot. BZ(1215359)
selinux-policy-3.13.1-105.18.fc21 has been submitted as an update for Fedora 21.
* should fix your issue,
* was pushed to the Fedora 21 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing selinux-policy-3.13.1-105.18.fc21'
as soon as you are able to.
Please go to the following url:
then log in and leave karma (feedback).
selinux-policy-3.13.1-105.19.fc21 has been submitted as an update for Fedora 21.
selinux-policy-3.13.1-105.19.fc21 has been pushed to the Fedora 21 stable repository. If problems still persist, please make note of it in this bug report.