Re: Virtqemud wants to unlink /dev/urandom

2022-03-16 Thread Nikola Knazekova
1, 2022 at 03:55:03PM +0100, Nikola Knazekova wrote: > >> Hey Martin, > >> > >> thanks for your resposne. > >> > >> I don't know if it is happening in the mount namespace. Can you look > >> at the > >> logs in attachment? >

Virtqemud wants to unlink /dev/urandom

2022-02-24 Thread Nikola Knazekova
Hi, when I am creating virtual machine on system with new SELinux policy for Libvirt, I am getting this error message: Unable to complete install: 'Unable to create device /dev/urandom: File exists' Traceback (most recent call last): File "/usr/share/virt-manager/virtManager/asyncjob.py", line

[PATCH 1/3] Add SELinux policy for virt

2021-03-10 Thread Nikola Knazekova
internally and policy for these drivers is made. Signed-off-by: Nikola Knazekova --- libvirt.spec.in | 62 ++ selinux/virt.fc | 111 +++ selinux/virt.if | 1984 selinux/virt.te | 2086 +++ 4 files changed

[PATCH 3/3] selinux: Remove 'make' dependency

2021-03-10 Thread Nikola Knazekova
From: Vit Mojzis Compile the policy using a shell script executed by meson. Signed-off-by: Vit Mojzis --- libvirt.spec.in | 12 meson.build | 12 selinux/compile_policy.sh | 39 +++ selinux/meson.build

[PATCH 2/3] [DO NOT MERGE] Install selinux-policy-devel in test environment

2021-03-10 Thread Nikola Knazekova
From: Vit Mojzis Temporary commit for testing purposes. The change needs to be done in https://gitlab.com/libvirt/libvirt-ci/-/blob/master/guests/lcitool/lcitool/ansible/vars/projects/libvirt.yml Signed-off-by: Vit Mojzis --- ci/containers/ci-centos-8.Dockerfile | 1 +

Add SELinux policy for Virt

2021-03-10 Thread Nikola Knazekova
Hi, I created SELinux policy for Libvirt drivers, as part of Decentralized SELinux Policy (DSP) project. DSP guidelines is available: https://fedoraproject.org/wiki/SELinux/IndependentPolicy Discussion about the first version of SELinux policy for Libvirt is available on gitlab: