Red Hat Bugzilla – Bug 474182
LVs created in an existing VG have wrong SELinux label
Last modified: 2009-08-05 12:35:07 EDT
Description of problem:
if one creates a volume in a pool that is an existing VG, the SELinux context is not set correctly
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. open virt-manager
2. have a storage pool that is an existing Volume Group with free Physical Extents (VG_x60_internal in my case)
3. create a new volume (eg. KVM_test) in that pool
# ls -lZ /dev/mapper/VG_x60_internal-KVM_test
brw------- root root system_u:object_r:fixed_disk_device_t:s0 /dev/mapper/VG_x60_internal-KVM_test
I do understand that this is a difficult case as my existing VG also has LVs for / and swap and we definitely do not want to change the context of these, but new volumes created in the GUI should be labelled with the correct context.
oops, forgot the versions:
I have a different scenario, with the same result. In rawhide pre-f11, Filesystem Directory pools, whether or not the directory exists or is created by virt-manager, are not given "virt_image_t". Startup of VM's using image files created in the pool then fail do to AVC devials.
Should this be a seperate BZ?
I think this is similar to bug #491245 and should be fixed in rawhide. Please re-open if not
*** This bug has been marked as a duplicate of bug 491245 ***
It would seem this is not fixed.
created a volume as per initial description.
# ls -lZ /dev/mapper/vg_bcblade02-KVM_test
brw-------. root root system_u:object_r:fixed_disk_device_t:s0 /dev/mapper/vg_bcblade02-KVM_test
This bug appears to have been reported against 'rawhide' during the Fedora 11 development cycle.
Changing version to '11'.
More information and reason for this action is here:
Creating LVM volumes with a particular label while nice, shouldn't really impact running of guests using the volume. Whenever you start a KVM guest in Fedora 11, libvirt will automatically set the correct label on all disks.
So what actual problem is this lack of labelling causing you ?
my bad, should have CLOSED CURRENTRELEASE this.
I can now create LVs in the virt-manager GUI and use them. Previously the wrong labelling was preventing use of the freshly created LVs.