Re: [Xen-users] Xen and SELinux

To:	"Daniel P. Berrange" <berrange@xxxxxxxxxx>
Subject:	Re: [Xen-users] Xen and SELinux
From:	TMC <tmciolek@xxxxxxxxx>
Date:	Tue, 12 Dec 2006 08:36:37 +1100
Cc:	Henning Sprang <henning_sprang@xxxxxx>, Xen users mailing list <xen-users@xxxxxxxxxxxxxxxxxxx>
Delivery-date:	Mon, 11 Dec 2006 13:36:41 -0800
Domainkey-signature:	a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=mh73LX7lF6TpYTbHFakWER5zyCmAbP84/MgNRDXCYEhyZfcuG//YsEU9N8hHTTPSbggCyUB/D2QdWpP1lzg+8MKJJ31/OsO9JVfXOAIZtPGcCQyqFHbqy43LgLkthUzPp8uacarFnLQeYxJLZ+NjUWVEqpOHJQe+mr0iFB8yrBA=
Envelope-to:	www-data@xxxxxxxxxxxxxxxxxx
In-reply-to:	<20061211175057.GE29520@xxxxxxxxxx>
List-help:	<mailto:xen-users-request@lists.xensource.com?subject=help>
List-id:	Xen user discussion <xen-users.lists.xensource.com>
List-post:	<mailto:xen-users@lists.xensource.com>
List-subscribe:	<http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe:	<http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
References:	<5bb00b3f0612110940v586a397cl793e036cecfcbb75@xxxxxxxxxxxxxx> <20061211175057.GE29520@xxxxxxxxxx>
Sender:	xen-users-bounces@xxxxxxxxxxxxxxxxxxx

What about use of disk partitions mapped to virtual devices?

On 12/12/06, Daniel P. Berrange <berrange@xxxxxxxxxx> wrote:

On Mon, Dec 11, 2006 at 06:40:06PM +0100, Henning Sprang wrote:
> I just wondered, all Howto's for Fedora, and a lot of other places say
> the user needs to disable SELinux when runinng Xen, at least in dom0.

That is incorrect. With Fedora Core 6 the recommendation is definitely
to have  SELinux enabled when running Xen. The main thing you have to
be careful of is where you keep your filesystem images. The SELinux
policy expects them in /var/lib/xen/images.  Same is true of ISO images
if you're using them to install fully virt guests.

> And I didn't see any explanation why or on how to make xen work with
> selinux enabled.

If you have disk images in the expected location, then Xen should 'just work'
with SELinux enabled.

> Does it mean it isn't working, is it so simple that there's no need to
> document it, or theorethically possible but too hard to get it
> working?

The howto you found is wrong :-(

I've added a note about neccessary SELinux disk image directory to the
official Fedora Xen guide.

http://fedoraproject.org/wiki/FedoraXenQuickstartFC6

Regards,
Dan.
--
|=- Red Hat, Engineering, Emerging Technologies, Boston.  +1 978 392 2496 -=|
|=-           Perl modules: http://search.cpan.org/~danberr/              -=|
|=-               Projects: http://freshmeat.net/~danielpb/               -=|
|=-  GnuPG: 7D3B9505   F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505  -=|

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users



--
GPG key fingerprint: 3883 B308 8256 2246 D3ED  A1FF 3A1D 0EAD 41C4 C2F0
GPG public key availabe on pgp.mit .edu keyserver

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

WARNING - OLD ARCHIVES

xen-users

Re: [Xen-users] Xen and SELinux