WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-users

Re: [Xen-users] Xen and SELinux

To: "Daniel P. Berrange" <berrange@xxxxxxxxxx>
Subject: Re: [Xen-users] Xen and SELinux
From: "Henning Sprang" <henning_sprang@xxxxxx>
Date: Mon, 11 Dec 2006 23:07:09 +0100
Cc: Xen users mailing list <xen-users@xxxxxxxxxxxxxxxxxxx>
Delivery-date: Mon, 11 Dec 2006 14:07:12 -0800
Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:sender:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references:x-google-sender-auth; b=TFfTKNP1A5ln16XHLqrGvzVpEUrFAP/apizvBGLqs8LDlAlXokihhMuHr5DEF86maEGMD26Q1c1ShzFkhINpvVWD01Ba1JUibxkLL3/7mz1k4c+fmxxhYNoZnOfCvVnbX39grlxaNeIQkkLwI2TaK5/VKfvOvFotMYgVnSFVl5A=
Envelope-to: www-data@xxxxxxxxxxxxxxxxxx
In-reply-to: <20061211175057.GE29520@xxxxxxxxxx>
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
References: <5bb00b3f0612110940v586a397cl793e036cecfcbb75@xxxxxxxxxxxxxx> <20061211175057.GE29520@xxxxxxxxxx>
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
On 12/11/06, Daniel P. Berrange <berrange@xxxxxxxxxx> wrote:
That is incorrect. With Fedora Core 6 the recommendation is definitely
to have  SELinux enabled when running Xen. The main thing you have to
be careful of is where you keep your filesystem images. The SELinux
policy expects them in /var/lib/xen/images.  Same is true of ISO images
if you're using them to install fully virt guests.

O.K.  Thanks a lot for all the information!

And do you think this applies also to other distributions, say,
somebody wants to run Xen on Debian with selinux? Is it correct to
assume that he has to do some things which the fedora people already
did (and which probably required some research)?

Henning

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

<Prev in Thread] Current Thread [Next in Thread>