qemu 9p/virtfs and selinux

[lejeczek]

hi all,

I'm trying qemu's virtfs passthrough, first time but pretty 
regular setup, and guests mount that mount tag, I can list 
in a guest mountpoint's content, I see files & dirs but when 
I try to add/create/remove content in the mountpoint then it 
gets denied:

$ touch DDD
touch: setting times of `DDD': No such file or directory

I believe I've fished out all selinux denials, also have 
disabled silent denials, I see no selinux denials in logs 
yet that kvm guest still cannot write to that passed-through 
host's filesystem.

Would you have some suggestions how to troubleshoot?
many thanks.
L

[Miroslav Grepl]

On 09/02/2016 02:30 PM, lejeczek wrote:
> hi all,
>
> I'm trying qemu's virtfs passthrough, first time but pretty regular
> setup, and guests mount that mount tag, I can list in a guest
> mountpoint's content, I see files & dirs but when I try to
> add/create/remove content in the mountpoint then it gets denied:
>
> $ touch DDD
> touch: setting times of `DDD': No such file or directory
>
> I believe I've fished out all selinux denials, also have disabled silent
> denials, I see no selinux denials in logs yet that kvm guest still
> cannot write to that passed-through host's filesystem.
>
> Would you have some suggestions how to troubleshoot?
> many thanks.
> L

Just to be sure, does it work in permissive mode?
> -- 
> selinux mailing list
> [e-mail]
> https://lists.fedoraproject.org/admin/lists/[e-mail]

[lejeczek]

On 08/09/16 10:38, Miroslav Grepl wrote:
> On 09/02/2016 02:30 PM, lejeczek wrote:
> > hi all,
> >
> > I'm trying qemu's virtfs passthrough, first time but pretty regular
> > setup, and guests mount that mount tag, I can list in a guest
> > mountpoint's content, I see files & dirs but when I try to
> > add/create/remove content in the mountpoint then it gets denied:
> >
> > $ touch DDD
> > touch: setting times of `DDD': No such file or directory
> >
> > I believe I've fished out all selinux denials, also have disabled silent
> > denials, I see no selinux denials in logs yet that kvm guest still
> > cannot write to that passed-through host's filesystem.
> >
> > Would you have some suggestions how to troubleshoot?
> > many thanks.
> > L
>
> Just to be sure, does it work in permissive mode?
> no. Only on thing I did not try wos SE completely disabled, but I don't want to do that.
> > -- 
> > selinux mailing list
> > [e-mail]
> > https://lists.fedoraproject.org/admin/lists/[e-mail]

[Miroslav Grepl]

On 09/08/2016 12:28 PM, lejeczek wrote:
> On 08/09/16 10:38, Miroslav Grepl wrote:
> > On 09/02/2016 02:30 PM, lejeczek wrote:
> > > hi all,
> > >
> > > I'm trying qemu's virtfs passthrough, first time but pretty regular
> > > setup, and guests mount that mount tag, I can list in a guest
> > > mountpoint's content, I see files & dirs but when I try to
> > > add/create/remove content in the mountpoint then it gets denied:
> > >
> > > $ touch DDD
> > > touch: setting times of `DDD': No such file or directory
> > >
> > > I believe I've fished out all selinux denials, also have disabled silent
> > > denials, I see no selinux denials in logs yet that kvm guest still
> > > cannot write to that passed-through host's filesystem.
> > >
> > > Would you have some suggestions how to troubleshoot?
> > > many thanks.
> > > L
> >
> > Just to be sure, does it work in permissive mode?
> > no. Only on thing I did not try wos SE completely disabled, but I
> > don't want to do that.

Ok it does not look like SELinux issue if it does not work also in
permissive mode. I would open a new bug against qemu and ask here.

Thank you.
> > > -- 
> > > selinux mailing list
> > > [e-mail]
> > > https://lists.fedoraproject.org/admin/lists/[e-mail]
>
> -- 
> selinux mailing list
> [e-mail]
> https://lists.fedoraproject.org/admin/lists/[e-mail]