forked from pool/libvirt
35 lines
1.3 KiB
Diff
35 lines
1.3 KiB
Diff
|
From 3a94e34f2a411a2e371c8ead1fe54f7bdeaf0422 Mon Sep 17 00:00:00 2001
|
||
|
|
Message-Id: <3a94e34f2a411a2e371c8ead1fe54f7bdeaf0422.1421716686.git.mlatimer@suse.com>
|
||
|
|
In-Reply-To: <cover.1421716686.git.mlatimer@suse.com>
|
||
|
|
References: <cover.1421716686.git.mlatimer@suse.com>
|
||
|
|
From: Mike Latimer <mlatimer@suse.com>
|
||
|
|
Date: Mon, 19 Jan 2015 18:18:02 -0700
|
||
|
|
Subject: [PATCH 3/3] Fix apparmor issues for tck
|
||
|
|
|
||
|
|
The network and nwfilter tests contained in the libvirt-TCK testkit can fail
|
||
|
|
unless access to raw network packets is granted. Without this access, the
|
||
|
|
following apparmor error can be seen while running the tests:
|
||
|
|
|
||
|
|
apparmor="DENIED" operation="create" parent=1 profile="/usr/sbin/libvirtd"
|
||
|
|
pid=94731 comm="libvirtd" family="packet" sock_type="raw" protocol=768
|
||
|
|
|
||
|
|
---
|
||
|
|
examples/apparmor/usr.sbin.libvirtd | 1 +
|
||
|
|
1 file changed, 1 insertion(+)
|
||
|
|
|
||
|
|
diff --git a/examples/apparmor/usr.sbin.libvirtd b/examples/apparmor/usr.sbin.libvirtd
|
||
|
|
index ab6572a..3cd6b58 100644
|
||
|
|
--- a/examples/apparmor/usr.sbin.libvirtd
|
||
|
|
+++ b/examples/apparmor/usr.sbin.libvirtd
|
||
|
|
@@ -35,6 +35,7 @@
|
||
|
|
network inet6 stream,
|
||
|
|
network inet6 dgram,
|
||
|
|
network packet dgram,
|
||
|
|
+ network packet raw,
|
||
|
|
|
||
|
|
# Very lenient profile for libvirtd since we want to first focus on confining
|
||
|
|
# the guests. Guests will have a very restricted profile.
|
||
|
|
--
|
||
|
|
1.8.4.5
|
||
|
|
|