Re: [libvirt] I have no idea why the current version of libvirt works for anyone in enforcing mode.

>>How about if we check if you are running with svirt then don't execute >>the code. Since I do not want to deal with these avc messages. Either >>they will happen always and I have to dontaudit them in which case a >>compromised svirt attacking the /root directory would be dontaudited, or >>people are going to see avc's all the time. > >For that scenario I think it'd be better to make virt-manager prevent >addition of sound hardware, since its in a position to give feedback >to the user telling them why sound devices aren't allowed. > > >Daniel Well there is no protocol currently to tell virt-manager that the libvirt is running with svirt. I tried to remove a audio device via virt-manager and it does nothing. Also what happens when virt-manager configures a remote libvirt? Does the sound card automatically get added?