From: dwalsh@redhat.com (Daniel J Walsh)
Date: Wed, 24 Sep 2008 15:49:37 -0400
Subject: [refpolicy] services_virt.patch
Message-ID: <48DA99D1.9060804@redhat.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

http://people.fedoraproject.org/~dwalsh/SELinux/F10/services_virt.patch


Add initrc support

allow admin to start/stop service

Fix misspelling in interface name virt_manage_pids_files

Allow additional definition of virt_images

Allow virt_image to be assigned to a blk_device

virtd_t needs getsched

Allow virtd to read/write kernel xen state

virtd needs to bind to the virt tcp port

Reads usr_t files

lists kernel modules

dnsmasq interaces in the dnsmasq policy patch

polkit interfaces in the policykit patch

virtd needs to setsched on qemu processes

Running virtd in unconfined domains for now.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkjamdEACgkQrlYvE4MpobPS6ACeMMaf74PByU4wHx5MK9PTeKum
dYEAn1N5J+w+BK/MvaW2NMmV5R0mJO1G
=GLTm
-----END PGP SIGNATURE-----