Re: [libvirt] [PATCH] storage: qemu: Fix security labelling of new image chain elements

2014-11-21 Thread Peter Krempa
On 11/21/14 00:15, Eric Blake wrote: On 11/20/2014 08:23 AM, Peter Krempa wrote: When creating a disk image snapshot the libvirt code would blindly copy the parents label to the newly created image. This runs into problems when you start a VM from an image hosted on NFS (or other storage

[libvirt] [PATCH] storage: qemu: Fix security labelling of new image chain elements

2014-11-20 Thread Peter Krempa
When creating a disk image snapshot the libvirt code would blindly copy the parents label to the newly created image. This runs into problems when you start a VM from an image hosted on NFS (or other storage system that doesn't support selinux labels) and the snapshot destination is on a storage

Re: [libvirt] [PATCH] storage: qemu: Fix security labelling of new image chain elements

2014-11-20 Thread Eric Blake
On 11/20/2014 08:23 AM, Peter Krempa wrote: When creating a disk image snapshot the libvirt code would blindly copy the parents label to the newly created image. This runs into problems when you start a VM from an image hosted on NFS (or other storage system that doesn't support selinux