pool/libvirt
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

- Fix libvirtd apparmor profile to work with libxenlight toolstack

Browse Source 
Updated install-apparmor-profiles.patch
  bnc#745890

OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=196
This commit is contained in:
James Fehlig 2012-02-08 18:38:09 +00:00 committed by Git OBS Bridge
parent b4b10fd188
commit afbe7ed7f9
2 changed files with 11 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
install-apparmor-profiles.patch
View File

@ -196,7 +196,7 @@ Index: libvirt-0.9.9/examples/apparmor/usr.sbin.libvirtd.in
=================================================================== ===================================================================
--- /dev/null --- /dev/null
+++ libvirt-0.9.9/examples/apparmor/usr.sbin.libvirtd.in +++ libvirt-0.9.9/examples/apparmor/usr.sbin.libvirtd.in
@@ -0,0 +1,54 @@ @@ -0,0 +1,57 @@
+# Last Modified: Fri Aug 19 11:20:36 2011 +# Last Modified: Fri Aug 19 11:20:36 2011
+#include <tunables/global> +#include <tunables/global>
+@{LIBVIRT}="libvirt" +@{LIBVIRT}="libvirt"
@ -221,6 +221,7 @@ Index: libvirt-0.9.9/examples/apparmor/usr.sbin.libvirtd.in
+ capability setpcap, + capability setpcap,
+ capability mknod, + capability mknod,
+ capability fsetid, + capability fsetid,
+ capability ipc_lock,
+ +
+ network inet stream, + network inet stream,
+ network inet dgram, + network inet dgram,
@ -235,6 +236,8 @@ Index: libvirt-0.9.9/examples/apparmor/usr.sbin.libvirtd.in
+ /sbin/* Ux, + /sbin/* Ux,
+ /usr/bin/* Ux, + /usr/bin/* Ux,
+ /usr/sbin/* Ux, + /usr/sbin/* Ux,
+ /usr/lib/xen/bin/qemu-dm Ux,
+ /usr/lib/PolicyKit/polkit-read-auth-helper Px,
+ +
+ # force the use of virt-aa-helper + # force the use of virt-aa-helper
+ audit deny /sbin/apparmor_parser rwxl, + audit deny /sbin/apparmor_parser rwxl,

7
libvirt.changes
View File

@ -1,3 +1,10 @@
-------------------------------------------------------------------
Wed Feb 8 11:12:28 MST 2012 - jfehlig@suse.com
- Fix libvirtd apparmor profile to work with libxenlight toolstack
Updated install-apparmor-profiles.patch
bnc#745890
------------------------------------------------------------------- -------------------------------------------------------------------
Wed Jan 25 14:40:32 MST 2012 - jfehlig@suse.com Wed Jan 25 14:40:32 MST 2012 - jfehlig@suse.com