libvirt and SELlinux 'access denied' in a VM

2014-03-21 Thread Juerg Haefliger
Hi, I started a VM using the official F20 cloud image, installed libvirt and its dependencies and tried to create a guest but SELinux won't let me: [root@fedora-20 ~]# virsh create mini.xml error: Failed to create domain from mini.xml error: Input/output error [root@fedora-20 ~]# journalctl | ta

Re: libvirt and SELlinux 'access denied' in a VM

2014-03-21 Thread Cole Robinson
On 03/21/2014 10:36 AM, Juerg Haefliger wrote: > Hi, > > I started a VM using the official F20 cloud image, installed libvirt and its > dependencies and tried to create a guest but SELinux won't let me: > > [root@fedora-20 ~]# virsh create mini.xml > error: Failed to create domain from mini.xml >

Re: libvirt and SELlinux 'access denied' in a VM

2014-03-21 Thread Juerg Haefliger
On Fri, Mar 21, 2014 at 3:40 PM, Cole Robinson wrote: > > On 03/21/2014 10:36 AM, Juerg Haefliger wrote: > > Hi, > > > > I started a VM using the official F20 cloud image, installed libvirt and its > > dependencies and tried to create a guest but SELinux won't let me: > > > > [root@fedora-20 ~]# v

Re: libvirt and SELlinux 'access denied' in a VM

2014-03-21 Thread Cole Robinson
On 03/21/2014 12:13 PM, Juerg Haefliger wrote: > > > > On Fri, Mar 21, 2014 at 3:40 PM, Cole Robinson > wrote: >> >> On 03/21/2014 10:36 AM, Juerg Haefliger wrote: >> > Hi, >> > >> > I started a VM using the official F20 cloud image, installed libvirt and >> > its >

Re: libvirt and SELlinux 'access denied' in a VM

2014-03-21 Thread Juerg Haefliger
On Fri, Mar 21, 2014 at 5:14 PM, Cole Robinson wrote: > > On 03/21/2014 12:13 PM, Juerg Haefliger wrote: > > > > > > > > On Fri, Mar 21, 2014 at 3:40 PM, Cole Robinson > > wrote: > >> > >> On 03/21/2014 10:36 AM, Juerg Haefliger wrote: > >> > Hi, > >> > > >> > I starte

Re: libvirt and SELlinux 'access denied' in a VM

2014-03-22 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 03/21/2014 10:36 AM, Juerg Haefliger wrote: > Hi, > > I started a VM using the official F20 cloud image, installed libvirt and > its dependencies and tried to create a guest but SELinux won't let me: > > [root@fedora-20 ~]# virsh create mini.xml e

Re: libvirt and SELlinux 'access denied' in a VM

2014-03-24 Thread Juerg Haefliger
On Sat, Mar 22, 2014 at 11:46 AM, Daniel J Walsh wrote: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 03/21/2014 10:36 AM, Juerg Haefliger wrote: > > Hi, > > > > I started a VM using the official F20 cloud image, installed libvirt and > > its dependencies and tried to create a guest b

Re: libvirt and SELlinux 'access denied' in a VM

2014-03-24 Thread Juerg Haefliger
On Mon, Mar 24, 2014 at 11:23 AM, Juerg Haefliger wrote: > > > > > On Sat, Mar 22, 2014 at 11:46 AM, Daniel J Walsh wrote: > > > > -BEGIN PGP SIGNED MESSAGE- > > Hash: SHA1 > > > > On 03/21/2014 10:36 AM, Juerg Haefliger wrote: > > > Hi, > > > > > > I started a VM using the official F20 c

Re: libvirt and SELlinux 'access denied' in a VM

2014-03-24 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 03/24/2014 06:28 AM, Juerg Haefliger wrote: > > > > On Mon, Mar 24, 2014 at 11:23 AM, Juerg Haefliger > wrote: >> >> >> >> >> On Sat, Mar 22, 2014 at 11:46 AM, Daniel J Walsh > wrote: >>>

Re: libvirt and SELlinux 'access denied' in a VM

2014-03-24 Thread Juerg Haefliger
On Mon, Mar 24, 2014 at 1:14 PM, Daniel J Walsh wrote: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 03/24/2014 06:28 AM, Juerg Haefliger wrote: > > > > > > > > On Mon, Mar 24, 2014 at 11:23 AM, Juerg Haefliger > > wrote: > >> > >> > >> > >> > >> On Sat, Mar

Re: libvirt and SELlinux 'access denied' in a VM

2014-03-24 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 03/24/2014 08:44 AM, Juerg Haefliger wrote: > > > > On Mon, Mar 24, 2014 at 1:14 PM, Daniel J Walsh > wrote: >> > On 03/24/2014 06:28 AM, Juerg Haefliger wrote: > > > >> On Mon, Mar 24, 2014 at 11:23 AM, Juerg Haefl

Re: libvirt and SELlinux 'access denied' in a VM

2014-03-25 Thread Juerg Haefliger
On Mon, Mar 24, 2014 at 4:22 PM, Daniel J Walsh wrote: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 03/24/2014 08:44 AM, Juerg Haefliger wrote: > > > > > > > > On Mon, Mar 24, 2014 at 1:14 PM, Daniel J Walsh > > wrote: > >> > > On 03/24/2014 06:28 AM, Juerg

Re: libvirt and SELlinux 'access denied' in a VM

2014-03-26 Thread Daniel J Walsh
After you run semodule -DB Does sesearch --dontaudit give you any output? On 03/25/2014 03:44 AM, Juerg Haefliger wrote: > > > > On Mon, Mar 24, 2014 at 4:22 PM, Daniel J Walsh mailto:dwa...@redhat.com>> wrote: > > > On 03/24/2014 08:44 AM, Juerg Haefliger wrote: > > > > > On Mon, Mar 24, 201

Re: libvirt and SELlinux 'access denied' in a VM

2014-03-27 Thread Juerg Haefliger
On Wed, Mar 26, 2014 at 9:09 PM, Daniel J Walsh wrote: > > After you run > > semodule -DB > > Does > > sesearch --dontaudit > > give you any output? 'sesearch --dontaudit' after 'semodule -B' returns a list with 7646 lines. 'sesearch --dontaudit' after 'semodule -DB' returns nothing: [root@fedo