From c521110742d5a18f90199925158d0c1d5d936041f786ce44ef9f9286b1719df0 Mon Sep 17 00:00:00 2001 From: James Fehlig Date: Tue, 26 Nov 2013 21:52:18 +0000 Subject: [PATCH] - Allow execution of libvirt hook scripts in /etc/libvirt/hooks/ in libvirtd AppArmor profile OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=330 --- install-apparmor-profiles.patch | 3 ++- libvirt.changes | 6 ++++++ 2 files changed, 8 insertions(+), 1 deletion(-) diff --git a/install-apparmor-profiles.patch b/install-apparmor-profiles.patch index d5e027c..0d70823 100644 --- a/install-apparmor-profiles.patch +++ b/install-apparmor-profiles.patch @@ -203,7 +203,7 @@ Index: libvirt-1.1.4/examples/apparmor/usr.sbin.libvirtd.in =================================================================== --- /dev/null +++ libvirt-1.1.4/examples/apparmor/usr.sbin.libvirtd.in -@@ -0,0 +1,60 @@ +@@ -0,0 +1,61 @@ +# Last Modified: Fri Aug 19 11:20:36 2011 +#include +@{LIBVIRT}="libvirt" @@ -255,6 +255,7 @@ Index: libvirt-1.1.4/examples/apparmor/usr.sbin.libvirtd.in + audit deny /sys/kernel/security/apparmor/matching rwxl, + audit deny /sys/kernel/security/apparmor/.* rwxl, + /sys/kernel/security/apparmor/profiles r, ++ /etc/libvirt/hooks/* rix, + /etc/xen/scripts/* rix, + @libdir@/libvirt/* Pxr, + @libdir@/libvirt/libvirt_parthelper Ux, diff --git a/libvirt.changes b/libvirt.changes index a6b7ead..b12675d 100644 --- a/libvirt.changes +++ b/libvirt.changes @@ -1,3 +1,9 @@ +------------------------------------------------------------------- +Tue Nov 26 14:51:44 MST 2013 - jfehlig@suse.com + +- Allow execution of libvirt hook scripts in /etc/libvirt/hooks/ + in libvirtd AppArmor profile + ------------------------------------------------------------------- Wed Nov 20 10:57:57 MST 2013 - jfehlig@suse.com