On 11/14/2017 02:31 PM, Patrick O'Callaghan wrote:
On trying to fire up a VM using virt-manager, I get "unable to
map
backing store for guest RAM: Permission denied".
I use hugepages to lock down memory for the VM, which may be relevant
for the error. This worked correctly on F26 just before the upgrade to
F27. I have changed nothing in my VM configuration, nor in the config
file for QEMU. However, temporarily turning off SElinux allows the
startup to proceed, after which I can re-enable SElinux with no ill
effects, i.e. the VM runs correctly.
A complete relabel of my system (touch /.autolabel and reboot) has made
no difference.
Have you checked the AVC reports from selinux? It smells like a bad
policy re: hugepages for KVMs. It's difficult to say without the actual
AVC denials.
----------------------------------------------------------------------
- Rick Stevens, Systems Engineer, AllDigital ricks(a)alldigital.com -
- AIM/Skype: therps2 ICQ: 226437340 Yahoo: origrps2 -
- -
- "Hello. My PID is Inigo Montoya. You `kill -9'-ed my parent -
- process. Prepare to vi." -
----------------------------------------------------------------------