Re: [Qemu-devel] [PATCH 0/5] ATAPI pass through v2

[Vincent Hanquez]

On Wed, Jul 08, 2009 at 12:20:59PM -0500, Anthony Liguori wrote:
>>> I'm sure something like SELinux can be used to prevent a root QEMU  
>>> process from doing a firmware upgrade.
>>>     
>>
>> *boggle*  You're not serious, are you ?
>>   
>
> Yes, I'm actually a fan of SELinux in the context of a dedicated  
> virtualization system.

do you really expect to put a SCSI packet inspector (to detect firmware update
for example) in a SELinux layer ?

-- 
Vincent