Christian Boltz
98bfbb94e5
This needs to go upstream but hoping someone here more familiar with apparmor and its dev processes can do that. If not please let me know and I can give it a stab. - libvirt-leaseshelper.patch: add /usr/libexec as a path to the libvirt leaseshelper script (jsc#SLE-14253) OBS-URL: https://build.opensuse.org/request/show/831960 OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=272
32 lines
1.4 KiB
Diff
32 lines
1.4 KiB
Diff
profiles: Add /usr/libexec as a path to the libvirt leaseshelper script
|
|
|
|
openSUSE recently joined most distros in defining libexecdir as /usr/libexec.
|
|
The SUSE libvirt package, which for a long time has set libexecdir to
|
|
/usr/lib64/libvirt, needs to adopt. Jira SLE-14253 requests libvirt to use
|
|
/usr/libexec. libvirt 6.7.0 will be hitting Factory soon with libexecdir
|
|
set to /usr/libexec. Add it as a path for the libvirt_leaseshelper script.
|
|
|
|
Signed-off-by: Jim Fehlig <jfehlig@suse.com>
|
|
Index: apparmor-2.13.4/profiles/apparmor.d/usr.sbin.dnsmasq
|
|
===================================================================
|
|
--- apparmor-2.13.4.orig/profiles/apparmor.d/usr.sbin.dnsmasq
|
|
+++ apparmor-2.13.4/profiles/apparmor.d/usr.sbin.dnsmasq
|
|
@@ -88,7 +88,7 @@ profile /usr/sbin/dnsmasq /usr/{bin,sbin
|
|
/{,var/}run/libvirt/network/*.pid rw,
|
|
|
|
# libvirt lease helper
|
|
- /usr/lib{,64}/libvirt/libvirt_leaseshelper Cx -> libvirt_leaseshelper,
|
|
+ /usr/{lib/libvirt,lib64/libvirt,libexec}/libvirt_leaseshelper Cx -> libvirt_leaseshelper,
|
|
|
|
# lxc-net pid and lease files
|
|
/{,var/}run/lxc/dnsmasq.pid rw,
|
|
@@ -115,7 +115,7 @@ profile /usr/sbin/dnsmasq /usr/{bin,sbin
|
|
|
|
/etc/libnl-3/classid r,
|
|
|
|
- /usr/lib{,64}/libvirt/libvirt_leaseshelper m,
|
|
+ /usr/{lib/libvirt,lib64/libvirt,libexec}/libvirt_leaseshelper m,
|
|
|
|
owner @{PROC}/@{pid}/net/psched r,
|
|
owner @{PROC}/@{pid}/status r,
|