Red Hat Bugzilla – Bug 907399
Error occurs after change selinux from static to dynamic on virt-manager
Last modified: 2013-11-21 15:38:47 EST
Patch proposed upstream: https://www.redhat.com/archives/virt-tools-list/2013-February/msg00028.html
Fixed upstream with: commit b6f0ba364f6376793989450869db83e117586cec Author: Martin Kletzander <mkletzan@redhat.com> Date: Tue Feb 5 12:28:06 2013 +0100 Add support for security relabeling
I can reproduce this bug: Version: virt-manager-0.9.0-18.el6.x86_64 libvirt-0.10.2-18.el6_4.9.x86_64 Steps for Reproduce: 1. Prepare an VM which is not running. 2. Issue "virt-manager" to open virt-manager. 3. Select the existing VM, then "open" -> "details" -> "Overview" -> "Security" 4. Select "static" option, then specify a label,and apply it. such as: "system_u:system_r:svirt_t:s0:c100,c200" 5. Change selinux to dynamic,then apply Result: Error occurs after change selinux from static to dynamic from virt-manager: Error changing VM configuration: unsupported configuration: dynamic label type must use resource relabeling Verify: libvirt-0.10.2-21.el6.x86_64 virt-manager-0.9.0-19.el6.x86_64 Steps for Verify: 1. Prepare an VM which is not running. 2. Issue "virt-manager" to open virt-manager. 3. Select the existing VM, then "open" -> "details" -> "Overview" -> "Security" 4. Select "static" option, then specify a label,and apply it. such as: "system_u:system_r:svirt_t:s0:c100,c200" 5. Change selinux to dynamic,then apply Result: No error shows and change selinux from static to dynamic successfully.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHBA-2013-1646.html