Daniel P. Berrange wrote:
On Tue, Feb 13, 2007 at 04:09:54PM -0500, Michael DeHaan wrote:
>> It would be nice if SELinux just cared about, say, context instead of
paths in this case :)SELinux does only care about context. It is the policy which says which paths map to which contexts, and in current policy we have the mapping from xen_image_t going to /var/lib/xen/images.
Though it is easy to add additional paths via a bz against policy or (just locally) the semanage / restorecon commands.
Karl
