I have successfully (I believe) built (rebuilt on Ubuntu 14.04), installed, and used
libvirt 1.2.2. Behaviorally I can't tell the difference between what I've built
and what Ubuntu distributes.
Specifically, "virsh capabilities" shows this:
<secmodel>
<model>apparmor</model>
<doi>0</doi>
</secmodel>
<secmodel>
<model>dac</model>
<doi>0</doi>
<baselabel type='kvm'>+112:+113</baselabel>
<baselabel type='qemu'>+112:+113</baselabel>
</secmodel>
Which seems reasonable as well as expected.
I build 1.2.8 using the same commands, install the generated packages, recycle, and virsh
reports this:
<secmodel>
<model>none</model>
<doi>0</doi>
</secmodel>
<secmodel>
<model>dac</model>
<doi>0</doi>
<baselabel type='kvm'>+112:+113</baselabel>
<baselabel type='qemu'>+112:+113</baselabel>
</secmodel>
The app armor security model is missing, but It's unclear why that might be. The app
armor library is linked in and used (according to ldd), and nothing else on the system
changes. I can install / de-install the two versions and repeatedly demonstrate this
change.
Any suggestions on what I should be looking for? Nothing comes up via a web search.
Again: no special options on the configure, and the same technique is used to build both
versions. I'm looking for any pointers before I start digging into the code.
Thanks in advance!!
Gary