3 ms·
Worth mentioning that SVirt is also used for running containers on RHEL/Fedora/CentOS etc.
by yrro 6y ago
Worth mentioning that SVirt is also used for running containers on RHEL/Fedora/CentOS etc.
- totony 6y agoI don't think that's the case, svirt is specific to libvirt + selinux-virt, whereas containers use selinux-container which are integrated into docker & al. Same principle tho
- yrro 6y agoOriginally all the domains had 'svirt' in the name: https://www.projectatomic.io/blog/2016/03/dwalsh_selinux_containers/ https://www.projectatomic.io/blog/2016/03/dwalsh_selinux_con... These days containers have their own domains: https://www.mankier.com/8/container_selinux https://www.mankier.com/8/container_selinux As you say, the principle is the same. [edit] container_t is (or was?) an alias for svirt_lxc_net_t: https://danwalsh.livejournal.com/79191.html https://danwalsh.livejournal.com/79191.html