Re: [libvirt] This patch adds the label to lxc-enter-namespace

2013-03-12 Thread Daniel P. Berrange
On Thu, Mar 07, 2013 at 02:51:05PM -0500, Daniel J Walsh wrote: > One last strangeness, about half the time I run this, virsh hangs and never > returns. > Seems like > > if (conn->driver->domainGetSecurityLabel(domain, > seclabel) == 0) { > > > G

[libvirt] This patch adds the label to lxc-enter-namespace

2013-03-07 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 lxc-enter-namespace allows a process from outside a container to start a process inside a container. One problem with the current code is the process running within the container would run with the label of the process that created it. For example i

Re: [libvirt] This patch adds the label to lxc-enter-namespace

2013-02-01 Thread Daniel P. Berrange
On Fri, Jan 25, 2013 at 02:39:25PM -0500, Daniel J Walsh wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > (2nd pass) > > > lxc-enter-namespace allows a process from outside a container to start a > process inside a container. One problem with the current code is the process > runni

Re: [libvirt] This patch adds the label to lxc-enter-namespace

2013-02-01 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/25/2013 02:39 PM, Daniel J Walsh wrote: > (2nd pass) > > > lxc-enter-namespace allows a process from outside a container to start a > process inside a container. One problem with the current code is the > process running within the container

[libvirt] This patch adds the label to lxc-enter-namespace

2013-01-25 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 (2nd pass) lxc-enter-namespace allows a process from outside a container to start a process inside a container. One problem with the current code is the process running within the container would run with the label of the process that created it.

Re: [libvirt] This patch adds the label to lxc-enter-namespace

2013-01-24 Thread Daniel P. Berrange
On Thu, Jan 24, 2013 at 08:47:13AM -0500, Daniel J Walsh wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > (Resend to the correct list) > > > lxc-enter-namespace allows a process from outside a container to start a > process inside a container. One problem with the current code is t

[libvirt] This patch adds the label to lxc-enter-namespace

2013-01-24 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 (Resend to the correct list) lxc-enter-namespace allows a process from outside a container to start a process inside a container. One problem with the current code is the process running within the container would run with the label of the process