• 1
Loved your blog, but i am not able to figure out the difference between the MCS and MLS. I mean libVirt is using MLS labels or MCS, and what difference it will make if the VM is Label with MCS and MLS. Thanks

Well if you are running without mls policy you will be using MCS labeling.

If you have not configured anyting in libvirt for static labeling, then you are using MCS. If you want to use MLS you need to install selinux-policy-mls, then modify the /etc/selinux/config, relabel, reboot, and you are almost there. But it will probably not be a pleasant experience.

  • 1
?

Log in