Re: [PATCH v5 8/9] virtiofsd: Create new file using O_TMPFILE and set security context

2022-02-07 Thread Dr. David Alan Gilbert
* Vivek Goyal (vgo...@redhat.com) wrote: > If guest and host policies can't work with each other, then guest security > context (selinux label) needs to be set into an xattr. Say remap guest > security.selinux xattr to trusted.virtiofs.security.selinux. > > That means setting "fscreate" is not

[PATCH v5 8/9] virtiofsd: Create new file using O_TMPFILE and set security context

2022-02-02 Thread Vivek Goyal
If guest and host policies can't work with each other, then guest security context (selinux label) needs to be set into an xattr. Say remap guest security.selinux xattr to trusted.virtiofs.security.selinux. That means setting "fscreate" is not going to help as that's ony useful for