Re: [Qemu-devel] [PATCH v2 0/4] file descriptor passing using passfd

2012-06-13 Thread Corey Bryant
On 06/13/2012 06:28 AM, Kevin Wolf wrote: Am 08.06.2012 17:42, schrieb Corey Bryant: libvirt's sVirt security driver provides SELinux MAC isolation for Qemu guest processes and their corresponding image files. In other words, sVirt uses SELinux to prevent a QEMU process from opening files tha

Re: [Qemu-devel] [PATCH v2 0/4] file descriptor passing using passfd

2012-06-13 Thread Kevin Wolf
Am 08.06.2012 17:42, schrieb Corey Bryant: > libvirt's sVirt security driver provides SELinux MAC isolation for > Qemu guest processes and their corresponding image files. In other > words, sVirt uses SELinux to prevent a QEMU process from opening > files that do not belong to it. > > sVirt provi

Re: [Qemu-devel] [PATCH v2 0/4] file descriptor passing using passfd

2012-06-08 Thread Corey Bryant
Please review this patch series if you could. I apologize for sending it more than once. Thanks! -- Regards, Corey On 06/08/2012 11:42 AM, Corey Bryant wrote: libvirt's sVirt security driver provides SELinux MAC isolation for Qemu guest processes and their corresponding image files. In oth

[Qemu-devel] [PATCH v2 0/4] file descriptor passing using passfd

2012-06-08 Thread Corey Bryant
libvirt's sVirt security driver provides SELinux MAC isolation for Qemu guest processes and their corresponding image files. In other words, sVirt uses SELinux to prevent a QEMU process from opening files that do not belong to it. sVirt provides this support by labeling guests and resources with

Re: [Qemu-devel] [PATCH v2 0/4] file descriptor passing using passfd

2012-06-08 Thread Corey Bryant
Please ignore this series. Something is amiss. I'll be resending. -- Regards, Corey On 06/08/2012 10:49 AM, Corey Bryant wrote: libvirt's sVirt security driver provides SELinux MAC isolation for Qemu guest processes and their corresponding image files. In other words, sVirt uses SELinux to p

Re: [Qemu-devel] [PATCH v2 0/4] file descriptor passing using passfd

2012-06-08 Thread Corey Bryant
Please ignore this series as well. Something is amiss. I'll be resending. -- Regards, Corey On 06/08/2012 10:53 AM, Corey Bryant wrote: libvirt's sVirt security driver provides SELinux MAC isolation for Qemu guest processes and their corresponding image files. In other words, sVirt uses SELi

[Qemu-devel] [PATCH v2 0/4] file descriptor passing using passfd

2012-06-08 Thread Corey Bryant
libvirt's sVirt security driver provides SELinux MAC isolation for Qemu guest processes and their corresponding image files. In other words, sVirt uses SELinux to prevent a QEMU process from opening files that do not belong to it. sVirt provides this support by labeling guests and resources with

[Qemu-devel] [PATCH v2 0/4] file descriptor passing using passfd

2012-06-08 Thread Corey Bryant
libvirt's sVirt security driver provides SELinux MAC isolation for Qemu guest processes and their corresponding image files. In other words, sVirt uses SELinux to prevent a QEMU process from opening files that do not belong to it. sVirt provides this support by labeling guests and resources with