Re: [libvirt PATCH v6 35/36] run: add ability to set selinux context

2023-08-23 Thread Jonathon Jongsma
On 8/23/23 2:29 AM, Erik Skultety wrote: On Tue, Aug 22, 2023 at 03:24:03PM +0200, Peter Krempa wrote: On Thu, Jul 20, 2023 at 17:20:02 -0500, Jonathon Jongsma wrote: When running libvirt from the build directory with the 'run' script, it will run as unconfined_t. This can result in unexpected

Re: [libvirt PATCH v6 35/36] run: add ability to set selinux context

2023-08-23 Thread Erik Skultety
On Tue, Aug 22, 2023 at 03:24:03PM +0200, Peter Krempa wrote: > On Thu, Jul 20, 2023 at 17:20:02 -0500, Jonathon Jongsma wrote: > > When running libvirt from the build directory with the 'run' script, it > > will run as unconfined_t. This can result in unexpected behavior when > > selinux is

Re: [libvirt PATCH v6 35/36] run: add ability to set selinux context

2023-08-22 Thread Peter Krempa
On Thu, Jul 20, 2023 at 17:20:02 -0500, Jonathon Jongsma wrote: > When running libvirt from the build directory with the 'run' script, it > will run as unconfined_t. This can result in unexpected behavior when > selinux is enforcing due to the fact that the selinux policies are > written assuming

[libvirt PATCH v6 35/36] run: add ability to set selinux context

2023-07-20 Thread Jonathon Jongsma
When running libvirt from the build directory with the 'run' script, it will run as unconfined_t. This can result in unexpected behavior when selinux is enforcing due to the fact that the selinux policies are written assuming that libvirt is running with the system_u:system_r:virtd_t context. This