2022-09-02 00:07:34 +02:00
|
|
|
From 99d654438cb259bee70d23363b2d5aefee830c7e Mon Sep 17 00:00:00 2001
|
|
|
|
|
From: Jim Fehlig <jfehlig@suse.com>
|
|
|
|
|
Date: Tue, 5 Jul 2022 11:56:28 -0600
|
|
|
|
|
Subject: apparmor: Add rule allowing qemu to write screenshots
|
|
|
|
|
|
|
|
|
|
Not sure who added this patch. See bug#904426 for possible suspects.
|
|
|
|
|
---
|
|
|
|
|
src/security/apparmor/libvirt-qemu | 3 +++
|
|
|
|
|
1 file changed, 3 insertions(+)
|
|
|
|
|
|
Accepting request 1068569 from home:jfehlig:branches:Virtualization
- Update to libvirt 9.1.0
- Many incremental improvements and bug fixes, see
https://libvirt.org/news.html#v9-1-0-2023-03-01
- spec: Remove obsolete Groups tag
- spec: Integrate upstream spec file changes that split the
libvirt-daemon package, allowing more modular, customized
installations
- spec: New subpackages libvirt-daemon-common, libvirt-daemon-lock,
libvirt-daemon-log, libvirt-daemon-proxy, and
libvirt-daemon-plugin-lockd
- spec: Renamed subpackage libvirt-lock-sanlock to
libvirt-daemon-plugin-sanlock
- Dropped patches:
ef482951-apparmor-Allow-umount-dev.patch,
d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
697c16e3-qemu_process-better-debug-message.patch,
5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
OBS-URL: https://build.opensuse.org/request/show/1068569
OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=968
2023-03-02 01:49:27 +01:00
|
|
|
Index: libvirt-9.1.0/src/security/apparmor/libvirt-qemu
|
2014-11-17 18:17:05 +01:00
|
|
|
===================================================================
|
Accepting request 1068569 from home:jfehlig:branches:Virtualization
- Update to libvirt 9.1.0
- Many incremental improvements and bug fixes, see
https://libvirt.org/news.html#v9-1-0-2023-03-01
- spec: Remove obsolete Groups tag
- spec: Integrate upstream spec file changes that split the
libvirt-daemon package, allowing more modular, customized
installations
- spec: New subpackages libvirt-daemon-common, libvirt-daemon-lock,
libvirt-daemon-log, libvirt-daemon-proxy, and
libvirt-daemon-plugin-lockd
- spec: Renamed subpackage libvirt-lock-sanlock to
libvirt-daemon-plugin-sanlock
- Dropped patches:
ef482951-apparmor-Allow-umount-dev.patch,
d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch,
c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
697c16e3-qemu_process-better-debug-message.patch,
5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
OBS-URL: https://build.opensuse.org/request/show/1068569
OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=968
2023-03-02 01:49:27 +01:00
|
|
|
--- libvirt-9.1.0.orig/src/security/apparmor/libvirt-qemu
|
|
|
|
|
+++ libvirt-9.1.0/src/security/apparmor/libvirt-qemu
|
2022-12-01 22:53:09 +01:00
|
|
|
@@ -254,3 +254,6 @@
|
2022-04-02 00:35:43 +02:00
|
|
|
# required for QEMU accessing UEFI nvram variables
|
|
|
|
|
owner /var/lib/libvirt/qemu/nvram/*_VARS.fd rwk,
|
|
|
|
|
owner /var/lib/libvirt/qemu/nvram/*_VARS.ms.fd rwk,
|
2016-08-05 10:23:21 +02:00
|
|
|
+
|
2014-11-17 18:17:05 +01:00
|
|
|
+ # Temporary screendump rule -- See bsc#904426
|
|
|
|
|
+ /var/cache/libvirt/qemu/qemu.screendump.* rw,
|
