-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 This is my attempt at getting libvirt to work on an MLS machine. This patch attempts to take the current context libvirtcon = "system_u:system_r:virtd_t:SystemLow-SystemHigh" The the label of the virtual machine svirtcon = "system_u:system_r:virtd_t:TopSecret" Create a new context newcon = "system_u:system_r:virtd_t:TopSecret" Then call setsockcreatecon(newcon) Could you guys check the SELinux parts of this and make sure it matches your expectations. The patch does not work, because I think something is wrong with libvirt, it does not call qemuConnectMonitor? -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.14 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAkvtrm4ACgkQrlYvE4MpobOQ8gCcCeKTKyApgSUwZpfa4M/5XL7y ucoAoONXiiG22C2oSekqLEnteusxwHsb =NiF4 -----END PGP SIGNATURE-----