From: sven.vermeulen@siphos.be (Sven Vermeulen) Date: Wed, 11 Apr 2012 20:36:24 +0200 Subject: [refpolicy] [PATCH 4/4] libvirt use of qemu requires re-exec of qemu In-Reply-To: <20120411183017.GA6229@siphos.be> References: <20120411183017.GA6229@siphos.be> Message-ID: <20120411183623.GE6229@siphos.be> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com When using libvirt as the virtualization framework, using qemu as the virtualization environment itself, launching guests requires the qemu domain to have exec rights on its own binaries. Signed-off-by: Sven Vermeulen --- qemu.te | 2 ++ 1 files changed, 2 insertions(+), 0 deletions(-) diff --git a/qemu.te b/qemu.te index 9cf9992..0bbccb5 100644 --- a/qemu.te +++ b/qemu.te @@ -50,6 +50,8 @@ role system_r types qemu_t; # qemu local policy # +can_exec(qemu_t, qemu_exec_t) + storage_raw_write_removable_device(qemu_t) storage_raw_read_removable_device(qemu_t) -- 1.7.3.4