Daniel J Walsh e4eb553d12 virtcontainers: Add SELinux support for running VM Confinement ...

We want to launch the KVM launcher tool (qemu?) with an SELinux label, similar
to what we do with libvirt.

Currently when I use kata with Podman, it complains if we specify a label that
kata does not support SELinux labels. What I would like to do is have kata just
use this label to apply to the KVM launcher. Then I will work to generate a new
policy type (container_kvm_t) that will allow the KVM Launcher tool to do its
thing, but prevent breakout.

Fixes: #2501

Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>

2020-04-02 09:19:45 -04:00

..

selinux_tag.sh

virtcontainers: Add SELinux support for running VM Confinement

2020-04-02 09:19:45 -04:00

update-generated-runtime-proto.sh

VMCache: the core and the client

2019-03-08 10:05:59 +08:00