why qemu can access mnt_t type

[bigclouds <bigclouds@xxxxxxx>]

hi,all

why qemu can access mnt_t type dirs. following is my  ls command,   qemu use a file which has  MCS, but its parent dirs is not virt_image_t type.

under what condition  this will happen?  i do nothing about selinux policy.

thanks

 

[root@www data-center]# ls -lZ  /rhev/data-center/25c47fdd-47a3-4eac-933a-70ea6d44f615/5dad0fa9-a924-48e5-b248-9b58bd9ac986/images/149ec5e4-45e0-4353-bfa6-58ba9ed9c888/486a26e1-79f7-4df2-9469-c48613741c7e
-rw-rw----. qemu kvm system_u:object_r:svirt_image_t:s0:c517,c988 /rhev/data-center/25c47fdd-47a3-4eac-933a-70ea6d44f615/5dad0fa9-a924-48e5-b248-9b58bd9ac986/images/149ec5e4-45e0-4353-bfa6-58ba9ed9c888/486a26e1-79f7-4df2-9469-c48613741c7e

[root@www data-center]# ls -lZ /rhev/data-center
drwxr-xr-x.qemu kvm unconfined_u:object_r:mnt_t:s0   25c47 fdd-47a3-4eac-933a-70ea6d44f615
drwxr-xr-x. qemu kvm system_u:object_r:mnt_t:s0       mnt

[root@www data-center]# ls -lZ /rhev/data-center/25c47fdd-47a3-4eac-933a-70ea6d44f615/
lrwxrwxrwx. qemu kvm unconfined_u:object_r:mnt_t:s0   5dad0fa9-a924-48e5-b248-9b58bd9ac986 -> /rhev/data-center/mnt/_home_kvm_vms/5dad0fa9-a924-48e5-b248-9b58bd9ac986

[root@www data-center]# ls -lZ /rhev/data-center/25c47fdd-47a3-4eac-933a-70ea6d44f615/5dad0fa9-a924-48e5-b248-9b58bd9ac986/
drwxr-xr-x. qemu kvm system_u:object_r:user_home_t:s0 images

--
selinux mailing list
selinux@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/selinux