[Xen-users] Re: Xen and SELinux

[Bill Davidsen <davidsen@xxxxxxx>]

Daniel P. Berrange wrote:
> On Mon, Dec 11, 2006 at 06:40:06PM +0100, Henning Sprang wrote:
> > I just wondered, all Howto's for Fedora, and a lot of other places say
> > the user needs to disable SELinux when runinng Xen, at least in dom0.
> That is incorrect. With Fedora Core 6 the recommendation is definitely
> to have  SELinux enabled when running Xen. The main thing you have to
> be careful of is where you keep your filesystem images. The SELinux
> policy expects them in /var/lib/xen/images.  Same is true of ISO images
> if you're using them to install fully virt guests. 
>
> > And I didn't see any explanation why or on how to make xen work with
> > selinux enabled.
> If you have disk images in the expected location, then Xen should 'just work'
> with SELinux enabled.
That would be wonderful, but I believe that the directory 
/var/lib/xen/images needs to be created with some selinux attributes, 
which are not obvious to me. I can probably dig a list of non-working 
ones from my notes, though.
> > Does it mean it isn't working, is it so simple that there's no need to
> > document it, or theorethically possible but too hard to get it
> > working?
> The howto you found is wrong :-(  
>
> I've added a note about neccessary SELinux disk image directory to the
> official Fedora Xen guide.
>
> http://fedoraproject.org/wiki/FedoraXenQuickstartFC6
I just looked at it, it doesn't seem to have the magic mkdir 
incantation, and on my installs, one of which I just redid yesterday, 
whatever tooth fairy is supposed to create the directory didn't.
> Regards,
> Dan.

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users