Re: [PATCH for 6.2 v4] nbd/server: Add --selinux-label option

2021-11-16 Thread Eric Blake
On Tue, Nov 16, 2021 at 08:06:03AM +0100, Thomas Huth wrote: > On 15/11/2021 21.29, Eric Blake wrote: > > From: "Richard W.M. Jones" > > > > Under SELinux, Unix domain sockets have two labels. One is on the > > disk and can be set with commands such as chcon(1). There is a > > different label s

Re: [PATCH for 6.2 v4] nbd/server: Add --selinux-label option

2021-11-15 Thread Thomas Huth
On 15/11/2021 21.29, Eric Blake wrote: From: "Richard W.M. Jones" Under SELinux, Unix domain sockets have two labels. One is on the disk and can be set with commands such as chcon(1). There is a different label stored in memory (called the process label). This can only be set by the process

[PATCH for 6.2 v4] nbd/server: Add --selinux-label option

2021-11-15 Thread Eric Blake
From: "Richard W.M. Jones" Under SELinux, Unix domain sockets have two labels. One is on the disk and can be set with commands such as chcon(1). There is a different label stored in memory (called the process label). This can only be set by the process creating the socket. When using SELinux