Bug 696292 - RFE: svirt: add a mechanism to specify security level and range of MCS labels
Summary: RFE: svirt: add a mechanism to specify security level and range of MCS labels
Keywords:
Status: CLOSED DEFERRED
Alias: None
Product: Virtualization Tools
Classification: Community
Component: libvirt
Version: unspecified
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Libvirt Maintainers
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-04-13 19:07 UTC by Daniel Walsh
Modified: 2016-03-23 12:34 UTC (History)
10 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2016-03-23 12:34:25 UTC

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Description Daniel Walsh 2011-04-13 19:07:45 UTC 
We have been having conversations about running a dynamic svirt on top of an MLS machine.  The idea would be to carve out a range of MCS labels that would be safe to use for virtual machines and then have the rest of categories used by MLS.

I would suggest we just put something like  this in to the /etc/libvirt/libvirtd.conf 

Sensitivity: s0
MCSRange: 0-1023
Comment 1 Ramon de Carvalho Valle 2011-04-18 17:25:03 UTC 
For further reference:
http://marc.info/?t=130245618900003&r=1&w=2
Comment 2 Fedora Admin XMLRPC Client 2011-09-22 17:49:39 UTC 
This package has changed ownership in the Fedora Package Database.  Reassigning to the new owner of this component.
Comment 3 Fedora Admin XMLRPC Client 2011-09-22 17:52:37 UTC 
This package has changed ownership in the Fedora Package Database.  Reassigning to the new owner of this component.
Comment 4 Fedora Admin XMLRPC Client 2011-09-22 17:57:45 UTC 
This package has changed ownership in the Fedora Package Database.  Reassigning to the new owner of this component.
Comment 5 Fedora Admin XMLRPC Client 2011-11-30 19:30:21 UTC 
This package has changed ownership in the Fedora Package Database.  Reassigning to the new owner of this component.
Comment 6 Fedora Admin XMLRPC Client 2011-11-30 19:34:04 UTC 
This package has changed ownership in the Fedora Package Database.  Reassigning to the new owner of this component.
Comment 7 Fedora Admin XMLRPC Client 2011-11-30 19:40:28 UTC 
This package has changed ownership in the Fedora Package Database.  Reassigning to the new owner of this component.
Comment 8 Fedora Admin XMLRPC Client 2011-11-30 19:51:38 UTC 
This package has changed ownership in the Fedora Package Database.  Reassigning to the new owner of this component.
Comment 9 Cole Robinson 2012-06-07 14:09:50 UTC 
Moving to upstream tracker
Comment 10 Cole Robinson 2016-03-23 12:34:25 UTC 
This never happened, and I don't think it's tracked anywhere else. An extension like this probably needs to be pushed by an explicit requirement from the RHEL side before someone actually implements. Closing as DEFERRED until that exists
Note You need to log in before you can comment on or make changes to this bug.