Ovirt devel - May 2009 - [PATCH node] Temporarily disable security driver.

I've uploaded a new libvirtd based on the latest release into F12
but it requires a selinux config which we do not have on the node.
This is a temporary hack to make it work until we go to an F11 node.

Must remember to remove this for F11!!

Signed-off-by: Ian Main <imain at redhat.com>
---
 scripts/ovirt-functions |    5 +++++
 1 files changed, 5 insertions(+), 0 deletions(-)

diff --git a/scripts/ovirt-functions b/scripts/ovirt-functions
index 25a6bab..a1ee4ac 100755
--- a/scripts/ovirt-functions
+++ b/scripts/ovirt-functions
@@ -188,6 +188,11 @@ ovirt_setup_libvirtd() {
     # set up qemu daemon to allow outside VNC connections
     sed -i -e 's/^[[:space:]]*#[[:space:]]*\(vnc_listen =
"0.0.0.0"\).*/\1/' \
        /etc/libvirt/qemu.conf
+
+    # FIXME: For now, disable selinux security driver for qemu since we
don't seem
+    # to have the right policy file for it on F10.  DELETE ME FOR F11!!
+    echo 'security_driver = "none"' >>
/etc/libvirt/qemu.conf
+
     # set up libvirtd to listen on TCP (for kerberos)
     sed -i -e "s/^[[:space:]]*#[[:space:]]*\(listen_tcp\)\>.*/\1 =
1/" \
        -e "s/^[[:space:]]*#[[:space:]]*\(listen_tls\)\>.*/\1 = 0/"
\
-- 
1.6.0.6

On Thu, May 28, 2009 at 08:54:42AM -0700, Ian Main
wrote:
> I've uploaded a new libvirtd based on the latest release into F12
> but it requires a selinux config which we do not have on the node.
> This is a temporary hack to make it work until we go to an F11 node.
> 
> Must remember to remove this for F11!!
It is better if the libvirt build in F10 didn't turn on the SELinxu
driver, then we won't need to disable it.

Daniel
-- 
|: Red Hat, Engineering, London   -o-   http://people.redhat.com/berrange/ :|
|: http://libvirt.org  -o-  http://virt-manager.org  -o-  http://ovirt.org :|
|: http://autobuild.org       -o-         http://search.cpan.org/~danberr/ :|
|: GnuPG: 7D3B9505  -o-  F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505 :|