How to create unix-channel in 'connect' source mode with SELinux enabled?

Question

linux

I have a domain on CentOS 6 with the following configuration:

.........................................................
<channel type='unix'>
  <source mode='bind' path='/var/lib/libvirt/qemu/vport0'/>
  <target type='virtio' name='vport0'/>
  <address type='virtio-serial' controller='0' bus='0' port='1'/>
</channel>
<channel type='unix'>
  <source mode='connect' path='/var/lib/libvirt/qemu/vport0'/>
  <target type='virtio' name='vport0'/>
  <address type='virtio-serial' controller='0' bus='0' port='2'/>
</channel>
.........................................................

After running it with SELinux enabled, I see the following error:

error: Failed to start domain proxy-agent0
error: unable to set security context 'system_u:object_r:svirt_image_t:s0:c269,c347' on '/var/lib/libvirt/qemu/vport0': No such file or directory

With SELinux disabled, the problem is not observed, the domain starts without errors.
How to solve the problem besides disabling SELinux? Is there a way to force the creation of a virtual port right after reading an item in the config?
Let me emphasize one point: there are no errors when configuring with a channel only with source mode='bind'.

# ausearch -r -m VIRT_CONTROL -ts today
type=VIRT_CONTROL msg=audit(1482305847.172:2201): user pid=2430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="proxy-agent0" uuid=62bb1bc5-4e17-f67b-22a4-c14a487547e8 vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed'

Answer 1

The answer to the question has been found.
In the domain config, you need to write the line:
At the same time, SELinux on the hypervisor does not check any files related to the domain, but the domain itself starts.

Answer 2

look here