Bug 720811 - SELinux prevents vdsm/libvirt from executing qemu-kvm.
Summary: SELinux prevents vdsm/libvirt from executing qemu-kvm.
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Red Hat Enterprise Linux 6
Classification: Red Hat
Component: vdsm
Version: 6.1
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: rc
: ---
Assignee: Dan Kenigsberg
QA Contact: yeylon@redhat.com
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-07-12 20:10 UTC by Brandon Perkins
Modified: 2016-04-18 06:41 UTC (History)
5 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2011-07-13 19:35:27 UTC
Target Upstream Version:

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Description Brandon Perkins 2011-07-12 20:10:07 UTC 
Description of problem:
SELinux prevents vdsm/libvirt from executing qemu-kvm.

Version-Release number of selected component (if applicable):
vdsm-4.9-79.el6.x86_64
libvirt-0.8.7-18.el6.x86_64

How reproducible:
Always.

Steps to Reproduce:
1. Install RHEL Hypervisor.
2. Create a new server VM
3. Start said VM.
  
Actual results:
VM rhel6tmpl is down. Exit message internal error process exited while connecting to monitor: 15:53:39.111: 30730: info : libvirt version: 0.8.7, package: 18.el6 (Red Hat, Inc. <http://bugzilla.redhat.com/bugzilla>, 2011-04-18-10:28:30, x86-008.build.bos.redhat.com)
15:53:39.111: 30730: error : __virExec:676 : cannot execute binary /usr/libexec/qemu-kvm: Permission denied
libvir: error : cannot execute binary /usr/libexec/qemu-kvm: Permission denied
.

Expected results:
VM rhel6tmpl was started by rhevm (Host: rhev-a16c-03.mpc.lab.eng.bos.redhat.com).
VM rhel6tmpl started on Host rhev-a16c-03.mpc.lab.eng.bos.redhat.com

Additional info:
Upon going from Enforcing to Permissive, the VM starts without problems.
Note You need to log in before you can comment on or make changes to this bug.