libvirt/apparmor-fixes.patch
James Fehlig 563e94d4f8 Accepting request 294211 from home:jfehlig:branches:Virtualization
- Disable building wireshark dissector.  Commit 37397320
  requires wireshark pkgconfig, which SUSE wireshark packages
  do not provide.
- Disable building the legacy Xen driver since Xen no longer
  provides the xend toolstack.  Remove xend-specific patches
  while at it: fix-pci-attach-xen-driver.patch,
  xen-name-for-devid.patch

- Update to libvirt 1.2.14
  - qemu: Implement memory device hotplug
  - Implement public API for virDomainPinIOThread
  - Implement public API for virDomainGetIOThreadsInfo
  - SRIOV NIC offload feature discovery
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Drop disable-hugepage-test.patch in favor of upstream fix

- Fix build on older distros containing a polkit package that lacks
  support for /etc/polkit-1/rules.d drop directory

OBS-URL: https://build.opensuse.org/request/show/294211
OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=450
2015-04-02 16:20:09 +00:00

34 lines
869 B
Diff

Index: libvirt-1.2.14/examples/apparmor/libvirt-qemu
===================================================================
--- libvirt-1.2.14.orig/examples/apparmor/libvirt-qemu
+++ libvirt-1.2.14/examples/apparmor/libvirt-qemu
@@ -59,6 +59,7 @@
# access to firmware's etc
/usr/share/kvm/** r,
/usr/share/qemu/** r,
+ /usr/share/qemu-kvm/** r,
/usr/share/bochs/** r,
/usr/share/openbios/** r,
/usr/share/openhackware/** r,
@@ -73,6 +74,7 @@
# the various binaries
/usr/bin/kvm rmix,
/usr/bin/qemu rmix,
+ /usr/bin/qemu-kvm rmix,
/usr/bin/qemu-system-arm rmix,
/usr/bin/qemu-system-cris rmix,
/usr/bin/qemu-system-i386 rmix,
@@ -118,6 +120,12 @@
/bin/dd rmix,
/bin/cat rmix,
+ # for restore
+ /bin/bash rmix,
+
+ /run/nscd/passwd r,
+ /run/nscd/group r,
+
# for usb access
/dev/bus/usb/ r,
/etc/udev/udev.conf r,