From 6aecdae0d27737ad4fc2069e2e0ad1bf626da7608060687814ea37718078f56c Mon Sep 17 00:00:00 2001 From: James Fehlig Date: Mon, 14 Oct 2013 20:02:22 +0000 Subject: [PATCH] - libvirtd apparmor profile was denying access to /usr/lib/xen/bin/qemu-system-i386, which is now the default emulator used with Xen guests Updated install-apparmor-profiles.patch bnc#845648 OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=304 --- install-apparmor-profiles.patch | 3 ++- libvirt.changes | 9 +++++++++ 2 files changed, 11 insertions(+), 1 deletion(-) diff --git a/install-apparmor-profiles.patch b/install-apparmor-profiles.patch index 1cc53e2..5cb6574 100644 --- a/install-apparmor-profiles.patch +++ b/install-apparmor-profiles.patch @@ -202,7 +202,7 @@ Index: libvirt-1.1.2/examples/apparmor/usr.sbin.libvirtd.in =================================================================== --- /dev/null +++ libvirt-1.1.2/examples/apparmor/usr.sbin.libvirtd.in -@@ -0,0 +1,58 @@ +@@ -0,0 +1,59 @@ +# Last Modified: Fri Aug 19 11:20:36 2011 +#include +@{LIBVIRT}="libvirt" @@ -244,6 +244,7 @@ Index: libvirt-1.1.2/examples/apparmor/usr.sbin.libvirtd.in + /usr/bin/* Ux, + /usr/sbin/* Ux, + /usr/lib/xen/bin/qemu-dm Ux, ++ /usr/lib/xen/bin/qemu-system-i386 Ux, + /usr/lib/PolicyKit/polkit-read-auth-helper Px, + + # force the use of virt-aa-helper diff --git a/libvirt.changes b/libvirt.changes index 29f615d..73c4675 100644 --- a/libvirt.changes +++ b/libvirt.changes @@ -1,3 +1,12 @@ +------------------------------------------------------------------- +Mon Oct 14 13:46:14 MDT 2013 - jfehlig@suse.com + +- libvirtd apparmor profile was denying access to + /usr/lib/xen/bin/qemu-system-i386, which is now the default + emulator used with Xen guests + Updated install-apparmor-profiles.patch + bnc#845648 + ------------------------------------------------------------------- Thu Oct 3 11:04:26 MDT 2013 - jfehlig@suse.com