-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 02/08/2012 05:27 AM, Shweta Shinde wrote:
Hi Daniel, Thanks for the reply. I tried out LXC
sf.net
<
http://sf.net> for creating containers.
According to following link, RHEL 6.2 will support LXC libvirt
API.
http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html-single/...
It further says, Linux Containers are just a Technology Preview. Will
RHEL provide libvirt lxc integrated with its future releases?
We hope to.
And, if I want to work with container for longterm using RHEL, will
I need to shift to libvirt LXC?
Yes
As of now, from where can I download the libvirt LXC.
That the other Daniel will need to answer...
Thanks, Shweta
On Tue, Jan 31, 2012 at 5:47 PM, Daniel P. Berrange
<berrange(a)redhat.com <mailto:berrange@redhat.com>> wrote:
On Tue, Jan 31, 2012 at 05:40:44PM +0530, Shweta Shinde wrote:
> Hi everyone, I am interested in the security aspects of LXC. How
> can we use SELinux to secure LXC containers? Any information will
> be very helpful.
I recently posted patches to libvirt, which extend the sVirt
support from KVM, to also cover our LXC driver. This will ensure
strict confinement of LXC containers using SELinux
https://www.redhat.com/archives/libvir-list/2012-January/msg01006.html
Fedora 17 policy is being enhanced to support this at the same
time.
NB, this only applies to the libvirt LXC userspace driver, which
is completely separate from the LXC
sf.net <
http://sf.net>
userspace.
Regards, Daniel -- |:
http://berrange.com -o-
http://www.flickr.com/photos/dberrange/ :| |:
http://libvirt.org
-o-
http://virt-manager.org :| |:
http://autobuild.org -o-
http://search.cpan.org/~danberr/ :| |:
http://entangle-photo.org
-o-
http://live.gnome.org/gtk-vnc :|
-- selinux mailing list selinux(a)lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/selinux
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla -
http://enigmail.mozdev.org/
iEYEARECAAYFAk8ygrsACgkQrlYvE4MpobP81wCgxGzNvrUxvg2aT7HE2ojhkjCo
srUAnA1xj6Z3HVl4JPU3N3HHzFyKN6/e
=3+Wt
-----END PGP SIGNATURE-----