Introduce SELinux policy for libvirt drivers

fedora-selinux / selinux-policy-contrib

Fedora Policy Contributions

39 stars 66 forks source link

Introduce SELinux policy for libvirt drivers #316

Open 5umm3r15 opened 4 years ago

5umm3r15 commented 4 years ago

New SELinux policy for libvirt drivers: Hypervisor drivers:

virtqemud (QEMU/KVM)
virtlxcd (LXC)
virtvboxd (VirtualBox)

Secondary drivers:

virtstoraged (host storage mgmt)
virtnetworkd (virtual network mgmt)
virtinterface (network interface mgmt)
virtnodedevd (physical device mgmt)
virtsecretd (security credential mgmt)
virtnwfilterd (ip[6]tables/ebtables mgmt)
virtproxyd (proxy daemon)

SELinux policy for virtvxz and virtxend has not been created yet.

5umm3r15 commented 4 years ago

Hi @wrabcak @zpytela can you please review it? It is a design of selinux policy for virt drivers. SELinux policy for virtvxz and virtxend has not been created yet. Interfaces are still not solved yet.