Re: [libvirt] [sandbox PATCH 1/2] Add virt-sandbox -s inherit, to execute the sandbox from the parent.

2013-08-15 Thread Daniel P. Berrange
On Tue, Aug 13, 2013 at 01:10:11PM -0400, Dan Walsh wrote: This will allow us to run sandbox as the calling process, If I am running a shell as staff_u:unconfined_r:unconfined_t:s0, and I execute virt-sandbox -c lxc/// -- /bin/sh /bin/sh will run as staff_u:unconfined_r:unconfined_t:s0 ---

Re: [libvirt] [sandbox PATCH 1/2] Add virt-sandbox -s inherit, to execute the sandbox from the parent.

2013-08-15 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/15/2013 04:48 AM, Daniel P. Berrange wrote: On Tue, Aug 13, 2013 at 01:10:11PM -0400, Dan Walsh wrote: This will allow us to run sandbox as the calling process, If I am running a shell as staff_u:unconfined_r:unconfined_t:s0, and I execute

Re: [libvirt] [sandbox PATCH 1/2] Add virt-sandbox -s inherit, to execute the sandbox from the parent.

2013-08-15 Thread Daniel P. Berrange
On Thu, Aug 15, 2013 at 07:43:01AM -0400, Daniel J Walsh wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/15/2013 04:48 AM, Daniel P. Berrange wrote: On Tue, Aug 13, 2013 at 01:10:11PM -0400, Dan Walsh wrote: This will allow us to run sandbox as the calling process, If I am

[libvirt] [sandbox PATCH 1/2] Add virt-sandbox -s inherit, to execute the sandbox from the parent.

2013-08-13 Thread Dan Walsh
This will allow us to run sandbox as the calling process, If I am running a shell as staff_u:unconfined_r:unconfined_t:s0, and I execute virt-sandbox -c lxc/// -- /bin/sh /bin/sh will run as staff_u:unconfined_r:unconfined_t:s0 --- bin/virt-sandbox-service.pod | 6 +-