Accepting request 528889 from home:jfehlig:branches:Virtualization

Fix various apparmor issues.

- apparmor: Add rules for kernel 4.13 ptrace checks
  b482925c-apparmor-ptrace-support.patch
  Drop temporary workaround apparmor-ptrace-support.patch
  bsc#1058847
- apparmor: Add rules for denial encountered when starting
  confined domains
  f305d8a1-apparmor-attach_disconnected.patch,
  suse-apparmor-libnl-paths.patch
  Drop old, useless, undocumented apparmor-fixes.patch

OBS-URL: https://build.opensuse.org/request/show/528889
OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=624

libvirt.spec

@@ -307,10 +307,11 @@ Source100:      %{name}-rpmlintrc
 Patch0:         92bd87a2-ryzen-test-data.patch
 Patch1:         5c83b360-epyc-test-data.patch
 Patch2:         a0b62843-epyc-cpu-model.patch
+Patch3:         f305d8a1-apparmor-attach_disconnected.patch
+Patch4:         b482925c-apparmor-ptrace-support.patch
 # Patches pending upstream review
 Patch100:       libxl-dom-reset.patch
 Patch101:       network-don-t-use-dhcp-authoritative-on-static-netwo.patch
-Patch102:       apparmor-ptrace-support.patch
 # Need to go upstream
 Patch150:       xen-pv-cdrom.patch
 Patch151:       blockcopy-check-dst-identical-device.patch
@@ -318,7 +319,6 @@ Patch152:       libvirt-power8-models.patch
 Patch153:       ppc64le-canonical-name.patch
 Patch154:       libxl-set-migration-constraints.patch
 Patch155:       libxl-set-cach-mode.patch
-Patch156:       apparmor-fixes.patch
 # Our patches
 Patch200:       suse-libvirtd-disable-tls.patch
 Patch201:       suse-libvirtd-sysconfig-settings.patch
@@ -328,14 +328,15 @@ Patch204:       suse-virtlogd-sysconfig-settings.patch
 Patch205:       suse-libvirtd-service-xen.patch
 Patch206:       suse-qemu-conf.patch
 Patch207:       suse-ovmf-paths.patch
-Patch208:       support-managed-pci-xen-driver.patch
-Patch209:       xen-sxpr-disk-type.patch
-Patch210:       libxl-support-block-script.patch
-Patch211:       apparmor-no-mount.patch
-Patch212:       qemu-apparmor-screenshot.patch
-Patch213:       libvirt-suse-netcontrol.patch
-Patch214:       lxc-wait-after-eth-del.patch
-Patch215:       libxl-qemu-emulator-caps.patch
+Patch208:       suse-apparmor-libnl-paths.patch
+Patch209:       support-managed-pci-xen-driver.patch
+Patch210:       xen-sxpr-disk-type.patch
+Patch211:       libxl-support-block-script.patch
+Patch212:       apparmor-no-mount.patch
+Patch213:       qemu-apparmor-screenshot.patch
+Patch214:       libvirt-suse-netcontrol.patch
+Patch215:       lxc-wait-after-eth-del.patch
+Patch216:       libxl-qemu-emulator-caps.patch
 # SLES-Only patches
 %if %{with_sle_build}
 Patch400:       virt-create-rootfs.patch
@@ -876,16 +877,16 @@ libvirt plugin for NSS for translating domain names into IP addresses.
 %patch0 -p1
 %patch1 -p1
 %patch2 -p1
+%patch3 -p1
+%patch4 -p1
 %patch100 -p1
 %patch101 -p1
-%patch102 -p1
 %patch150 -p1
 %patch151 -p1
 %patch152 -p1
 %patch153 -p1
 %patch154 -p1
 %patch155 -p1
-%patch156 -p1
 %patch200 -p1
 %patch201 -p1
 %patch202 -p1
@@ -902,6 +903,7 @@ libvirt plugin for NSS for translating domain names into IP addresses.
 %patch213 -p1
 %patch214 -p1
 %patch215 -p1
+%patch216 -p1
 %if %{with_sle_build}
 %patch400 -p1
 %endif