Hi Marc-André On 07/27/2015 10:09 PM, Marc-André Lureau wrote:
Hi Luyao
On Thu, Jul 23, 2015 at 12:13 PM, Luyao Huang <lhuang@redhat.com> wrote:
But the problem is we cannot change the running shm-server process label, We need wait ivshmem-server to be a part of qemu progrem, then setup the ivshmem-server by libvirt. we cannot do nothing for the ivshmem-server right now. ivshmem-server is going to be a separate server process, not part of qemu process.
OKay, thanks for clarification, i saw the patches in qemu-devel mail list, so i thought it will be a part of qemu project :)
Is it enough if ivshmem-server is started by libvirt to solve the selinux issue?
I think it is enough, also as Daniel's reply: it will be better if ivshmem-server could be a part of libvirt.
What's missing to get started to support it with libvirt?
I think is the ivshmem-server set up and audit part, and i think Martin will be the best people to give a answer. Luyao