This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
Home Products Support Community News


[Xen-users] Xen & SELINUX: how disable in guest?

To: xen-users@xxxxxxxxxxxxxxxxxxx
Subject: [Xen-users] Xen & SELINUX: how disable in guest?
From: Veniamin Konoplev <V.Konoplev@xxxxxxx>
Date: Tue, 29 Apr 2008 12:50:24 +0400
Delivery-date: Tue, 29 Apr 2008 01:50:52 -0700
Envelope-to: www-data@xxxxxxxxxxxxxxxxxx
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
Organization: IKI RAS
Reply-to: Veniamin Konoplev <V.Konoplev@xxxxxxx>
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
Hello all!

I try to boot the guest VM in native EL5.1 dom0.

Kernel for guest domain I took from source compiled Xen distributions
since native EL5.1 kernel being tired as guest did not see root
partition at all.

SELinux enforcing is disabled in the dom0:

> [root@mbone ~]# getenforce
> Permissive

Configuration file for guest domain has parameter to disable selinux:

> [root@mbone ~]# grep extra /etc/xen/xm-test
> # You can use 'extra' to set the runlevel and custom environment
> extra = "4 enforcing=0"

But I still get errors from SELinux:

> [root@mbone ~]# xm create -c /etc/xen/xm-test
> Using config file "/etc/xen/xm-test".
> Started domain ExampleDomain
> Linux version 2.6.18-xen (root@jig) (gcc version 3.4.6 20060404 (Red Hat 
> 3.4.6-8)) #12 SMP Thu Nov 29 11:53:14 MSK 2007
> ...
> VFS: Mounted root (ext3 filesystem) readonly.
> Freeing unused kernel memory: 184k freed
> Unable to load SELinux Policy. Machine is in enforcing mode. Halting now.
> Kernel panic - not syncing: Attempted to kill init!

Config string like 'extra = "4 selinux=1 enforce=0"' produce the same

What is wrong?

Thanks in advance.


Xen-users mailing list

<Prev in Thread] Current Thread [Next in Thread>