Re: [Qemu-devel] [PATCH v8 0/7] file descriptor passing using fd sets

2012-08-10 Thread Corey Bryant
On 08/10/2012 12:36 PM, Kevin Wolf wrote: Am 10.08.2012 04:10, schrieb Corey Bryant: libvirt's sVirt security driver provides SELinux MAC isolation for Qemu guest processes and their corresponding image files. In other words, sVirt uses SELinux to prevent a QEMU process from opening files tha

Re: [Qemu-devel] [PATCH v8 0/7] file descriptor passing using fd sets

2012-08-10 Thread Kevin Wolf
Am 10.08.2012 04:10, schrieb Corey Bryant: > libvirt's sVirt security driver provides SELinux MAC isolation for > Qemu guest processes and their corresponding image files. In other > words, sVirt uses SELinux to prevent a QEMU process from opening > files that do not belong to it. > > sVirt provi

[Qemu-devel] [PATCH v8 0/7] file descriptor passing using fd sets

2012-08-09 Thread Corey Bryant
libvirt's sVirt security driver provides SELinux MAC isolation for Qemu guest processes and their corresponding image files. In other words, sVirt uses SELinux to prevent a QEMU process from opening files that do not belong to it. sVirt provides this support by labeling guests and resources with