On 04/16/2009 06:54 AM, Daniel P. Berrange wrote:
On Thu, Apr 16, 2009 at 11:44:48AM +0100, Mark McLoughlin wrote:
> Running "make check" on F10, I get:
>
> libvir: Security Labeling error : SELinuxInitialize: cannot open SELinux virtual
domain context file /etc/selinux/targeted/contexts/virtual_domain_context: No such file or
directory
> Failed to start security driverFAIL: seclabeltest
>
> Seems virtual_domain_context isn't available on F10.
IMHO that's a Fedora packaging bug. We already probe for the presence
fo the selinux_virtual_domain_context_path() method, which didn't exist
in Fedora 10. So if that method has now appeared, but without the
files it requires in order to work that seems like a policy bug to me.
Daniel
Yes it is a policy bug, libselinux versus selinux-policy. Working on
backporting the F11 policy into F10.