Re: [libvirt] [PATCH v2] qemu: Correctly label migration TCP socket passed to qemu

25 Aug 2011


      On Thu, Aug 25, 2011 at 18:16:17 +0200, Jiri Denemark wrote:
...
---
Notes:
    Version 2:
    - use virSecurityManagerSetProcessFDLabel instead of
      virSecurityManagerSetImageFDLabel since the correct label for
      TCP sockets appears to be svirt_t and not svirt_image_t
Apparently this isn't right either. Relabeling a socket of an already
established connection is not a good idea since it may even break the
connection. I'll post a v3 that labels this in a different way.

Jirka