Comments on: Can you run SE Linux on a Xen Guest?

By: Ruben Kerkhof

Ruben Kerkhof — Thu, 01 Jul 2010 15:16:26 +0000

Hi Russell,

We’re using KVM at Tilaa, and allow you to run the kernel of your choice.
You can give it a try for 14 days, if you’re not satisfied we’ll refund your money, no questions asked.

By: Russ Herrold

Russ Herrold — Thu, 01 Jul 2010 06:49:36 +0000

sent to Rusty on June 28 …
> If anyone knows of a virtual hosting company that runs Xen or KVM virtual
> machines with SE Linux support then please let me know, I.ll write a blog
> post comparing such companies if there are some.
umm — I would be embarrassed to be a hosting provider which did NOT enable SElinux
Please feel free to set up a ‘comp’ account at:
http://www.pmman.com/signup/
at the green arrow. Use the [please do not repeat this] ‘Offer Code’ of: …
The initial deployment includes a SElinux relabelling phase, and one can reorder it as needed, of course. [We deliver enabled and run under SElinux when we deploy the instance; the customer can thereafter disable it, although I cannot imagine why ...]
Have fun
– Russ herrold

By: Uli

Uli — Tue, 29 Jun 2010 13:23:42 +0000

@russel: You gotta mail from us.

By: Craconia

Craconia — Tue, 29 Jun 2010 02:47:01 +0000

Hey thanks for the post! I asked because my current provider uses Virtuozzo and they told me they didn’t support it so I was curious on how things were on XEN (since I have never used it).

Regarding SELinux and support..well..many of these VPS providers, they usually have their “unmanaged plan” (their cheapeast) so I don’t see why they shouldn’t enable SELinux as in the end, if you’re on a “unmanaged plan”…you are on your own.

Regards,
Craconia

By: Michael Stevens

Michael Stevens — Mon, 28 Jun 2010 17:11:24 +0000

http://prgmr.com/xen/ support SELinux as they describe at http://book.xen.prgmr.com/mediawiki/index.php/SELinux_on_Xen

By: Michael Goetze

Michael Goetze — Mon, 28 Jun 2010 16:31:02 +0000

“If for the sake of discussion we assume that 5% of sysadmins who are making purchasing decisions regarding virtual servers really want to have SE Linux support…”

For the sake of what sort of discussion? :-) Because as an employee of a hosting company I am sure it is much, much lower. I’ve only supported customers with at least a dedicated server, but in that time I only ever encountered SELinux once – a semiknowledgable customer had decided SELinux sounded good and turned it on, then made their system unbootable by creating a new file in /tmp and then moving it to /etc/fstab. And I’ve heard quite a few questions that our sales dept. couldn’t answer themselves and none of them involved SELinux.

(And there is a reasonable chance that if anyone else had run into an SELinux problem they might have asked me, as I am one of only two employees who aced their RHCE. ;) )