SELinux with KVM?
-
Going to have me a Centos 7 host here soon and am planning out my deployment.
I am going to deploy KVM of course. Question is, do you install SELinux with KVM? ClamAV?
-
@NerdyDad said in SELinux with KVM?:
Going to have me a Centos 7 host here soon and am planning out my deployment.
I am going to deploy KVM of course. Question is, do you install SELinux with KVM? ClamAV?
Not sure what you mean with "SELinux with KVM"; are you talking about Svirt?
I can't imagine any relation between KVM and ClamAV… -
I'm confused on the ClamAV bit, too.
-
Would you deploy ClamAV on the host of KVM?
Would you deploy SELinux on the host of KVM? -
@NerdyDad said in SELinux with KVM?:
Would you deploy ClamAV on the host of KVM?
Would you deploy SELinux on the host of KVM?What little I've learned of SELinux, I thought it was something baked into CentOS. At least it seems to be for me.
-
@EddieJennings said in SELinux with KVM?:
@NerdyDad said in SELinux with KVM?:
Would you deploy ClamAV on the host of KVM?
Would you deploy SELinux on the host of KVM?What little I've learned of SELinux, I thought it was something baked into CentOS. At least it seems to be for me.
It is but needs to be setup.
-
@NerdyDad said in SELinux with KVM?:
@EddieJennings said in SELinux with KVM?:
@NerdyDad said in SELinux with KVM?:
Would you deploy ClamAV on the host of KVM?
Would you deploy SELinux on the host of KVM?What little I've learned of SELinux, I thought it was something baked into CentOS. At least it seems to be for me.
It is but needs to be setup.
Umm, no. SELinux is installed and working by default. The only setup you do is for things that need more permissions than SELinux provides by default.
-
-
@EddieJennings said in SELinux with KVM?:
@NerdyDad said in SELinux with KVM?:
Would you deploy ClamAV on the host of KVM?
Would you deploy SELinux on the host of KVM?What little I've learned of SELinux, I thought it was something baked into CentOS. At least it seems to be for me.
Part of a default install, yes.
-
@JaredBusch said in SELinux with KVM?:
@NerdyDad said in SELinux with KVM?:
@EddieJennings said in SELinux with KVM?:
@NerdyDad said in SELinux with KVM?:
Would you deploy ClamAV on the host of KVM?
Would you deploy SELinux on the host of KVM?What little I've learned of SELinux, I thought it was something baked into CentOS. At least it seems to be for me.
It is but needs to be setup.
Umm, no. SELinux is installed and working by default. The only setup you do is for things that need more permissions than SELinux provides by default.
Right. SELinux is installed by default. Some tools aren't (like policycoreutils). Svirt by default handles MLS labels for KVM guests. You shouldnt have to do any work to get all of that functionality.
