On Thu, Aug 25, 2011 at 18:16:17 +0200, Jiri Denemark wrote: > --- > Notes: > Version 2: > - use virSecurityManagerSetProcessFDLabel instead of > virSecurityManagerSetImageFDLabel since the correct label for > TCP sockets appears to be svirt_t and not svirt_image_t Apparently this isn't right either. Relabeling a socket of an already established connection is not a good idea since it may even break the connection. I'll post a v3 that labels this in a different way. Jirka -- libvir-list mailing list libvir-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/libvir-list