Users

Download

users@lists.libvirt.org

May 2015

42 participants
42 discussions

[libvirt-users] SELinux for separate shared folders
by drift＠ruggedinbox.com 02 May '15

02 May '15

How can I enforce SELinux separation between the shared folders belonging to different VMs running with sVirt's SELinux dynamic labels? I want to create a permanent exception for VM 'A' to only be able to read and write to shared folder 'A' and the same for VM 'B' and shared folder 'B' svirt_image_t permits access to a shared folder but for all VMs.

1 0

[libvirt-users] libvirt nwfilter
by drift＠ruggedinbox.com 01 May '15

01 May '15

To take advantage of the filters, is it as simple as adding these couple of lines in a guest's xml file like the example from https://libvirt.org/formatnwfilter.html#nwfconcepts ? <devices> <interface type='bridge'> <mac address='00:16:3e:5d:c7:9e'/> <filterref filter='clean-traffic'> <parameter name='IP' value='10.0.0.1'/> </filterref> </interface> </devices> Can multiple filters be combined together like this? <filterref filter='clean-traffic' filter='no-ip-multicast'> <parameter name='IP' value='10.0.0.1'/> </filterref> Can the IP address parameter override the one in /etc/network/interfaces on the guest? When cloning a vm does it change the ip to avoid conflicts like it would with mac-addresses?

2 1