configpolicy/roles/vmhost
Dustin 3270011fee r/vmhost: Work around libvirt SELinux policy bug
With the transition to modular _libvirt_ daemons, the SELinux policy is
a bit more granular.  Unfortunately, the new policy has a funny [bug]: it
assumes directories named `storage` under `/run/libvirt` must be for
_virtstoraged_ and labels them as such, which prevents _virtnetworkd_
from managing a virtual network named `storage`.

To work around this, we need to give `/run/libvirt/network` a special
label so that its children do not match the file transition pattern for
_virtstoraged_ and thus keep their `virtnetworkd_var_run_t` label.

[bug]: https://bugzilla.redhat.com/show_bug.cgi?id=2362040
2025-07-28 18:23:24 -05:00
..
defaults r/vmhost: Add autostart script 2022-08-20 21:15:31 -05:00
files r/vmhost: Work around libvirt SELinux policy bug 2025-07-28 18:23:24 -05:00
handlers r/vmhost: Add autostart script 2022-08-20 21:15:31 -05:00
tasks r/vmhost: Work around libvirt SELinux policy bug 2025-07-28 18:23:24 -05:00
templates r/vmhost: Update for latest libvirt 2025-03-29 07:34:58 -05:00
vars r/vmhost: Update for latest libvirt 2025-03-29 07:34:58 -05:00