Re: [Xen-users] Xen and SELinux

["Daniel P. Berrange" <berrange@xxxxxxxxxx>]

On Mon, Dec 11, 2006 at 11:07:09PM +0100, Henning Sprang wrote:
> On 12/11/06, Daniel P. Berrange <berrange@xxxxxxxxxx> wrote:
> >That is incorrect. With Fedora Core 6 the recommendation is definitely
> >to have  SELinux enabled when running Xen. The main thing you have to
> >be careful of is where you keep your filesystem images. The SELinux
> >policy expects them in /var/lib/xen/images.  Same is true of ISO images
> >if you're using them to install fully virt guests.
> 
> O.K.  Thanks a lot for all the information!
> 
> And do you think this applies also to other distributions, say,
> somebody wants to run Xen on Debian with selinux? Is it correct to
> assume that he has to do some things which the fedora people already
> did (and which probably required some research)?

I'm not too familiar with state of Xen / SELinux in Debian. All the stuff
we fix in Fedora/RHEL always goes back to upstream sources, so if Debian
folks are periodically refreshing SELinux policy from upstream they ought
to pick up the fixes eventually. 

Regards,
Dan.
-- 
|=- Red Hat, Engineering, Emerging Technologies, Boston.  +1 978 392 2496 -=|
|=-           Perl modules: http://search.cpan.org/~danberr/              -=|
|=-               Projects: http://freshmeat.net/~danielpb/               -=|
|=-  GnuPG: 7D3B9505   F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505  -=| 

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users