WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-users

[Xen-users] Re: Xen and SELinux

To: "Daniel P. Berrange" <berrange@xxxxxxxxxx>
Subject: [Xen-users] Re: Xen and SELinux
From: Bill Davidsen <davidsen@xxxxxxx>
Date: Wed, 20 Dec 2006 18:09:30 -0500
Cc: Xen users mailing list <xen-users@xxxxxxxxxxxxxxxxxxx>
Delivery-date: Thu, 28 Dec 2006 02:51:49 -0800
Envelope-to: www-data@xxxxxxxxxxxxxxxxxx
In-reply-to: <20061211175057.GE29520@xxxxxxxxxx>
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
Newsgroups: gmane.comp.emulators.xen.user
References: <5bb00b3f0612110940v586a397cl793e036cecfcbb75@xxxxxxxxxxxxxx> <20061211175057.GE29520@xxxxxxxxxx>
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
User-agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.8) Gecko/20061105 SeaMonkey/1.0.6
Daniel P. Berrange wrote:
On Mon, Dec 11, 2006 at 06:40:06PM +0100, Henning Sprang wrote:
I just wondered, all Howto's for Fedora, and a lot of other places say
the user needs to disable SELinux when runinng Xen, at least in dom0.

That is incorrect. With Fedora Core 6 the recommendation is definitely
to have  SELinux enabled when running Xen. The main thing you have to
be careful of is where you keep your filesystem images. The SELinux
policy expects them in /var/lib/xen/images.  Same is true of ISO images
if you're using them to install fully virt guests.
And I didn't see any explanation why or on how to make xen work with
selinux enabled.

If you have disk images in the expected location, then Xen should 'just work'
with SELinux enabled.

That would be wonderful, but I believe that the directory /var/lib/xen/images needs to be created with some selinux attributes, which are not obvious to me. I can probably dig a list of non-working ones from my notes, though.

Does it mean it isn't working, is it so simple that there's no need to
document it, or theorethically possible but too hard to get it
working?

The howto you found is wrong :-(
I've added a note about neccessary SELinux disk image directory to the
official Fedora Xen guide.

http://fedoraproject.org/wiki/FedoraXenQuickstartFC6

I just looked at it, it doesn't seem to have the magic mkdir incantation, and on my installs, one of which I just redid yesterday, whatever tooth fairy is supposed to create the directory didn't.

Regards,
Dan.


_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

<Prev in Thread] Current Thread [Next in Thread>