On Thu, Aug 15, 2013 at 08:04:41AM -0400, Dan Walsh wrote: > This will allow us to run sandbox as the calling process, If I am > running a shell as staff_u:unconfined_r:unconfined_t:s0, and I > execute virt-sandbox -c lxc/// -- /bin/sh > > /bin/sh will run as staff_u:unconfined_r:unconfined_t:s0 > --- > bin/virt-sandbox.c | 4 ++++ > configure.ac | 1 + > libvirt-sandbox.spec.in | 1 + > libvirt-sandbox/Makefile.am | 2 ++ > libvirt-sandbox/libvirt-sandbox-config.c | 14 ++++++++++++++ > m4/virt-selinux.m4 | 11 +++++++++++ > 6 files changed, 33 insertions(+) > create mode 100644 m4/virt-selinux.m4
ACK Daniel -- |: http://berrange.com -o- http://www.flickr.com/photos/dberrange/ :| |: http://libvirt.org -o- http://virt-manager.org :| |: http://autobuild.org -o- http://search.cpan.org/~danberr/ :| |: http://entangle-photo.org -o- http://live.gnome.org/gtk-vnc :| -- libvir-list mailing list libvir-list@redhat.com https://www.redhat.com/mailman/listinfo/libvir-list