rpm/libvirt
SHA256
1
0
Fork 0
forked from pool/libvirt
Code Pull Requests Activity

- virt-aa-helper apparmor profile was denying read access to

Browse Source 
/proc/$PID/*.  Give read accesss to these files.
  Updated install-apparmor-profiles.patch
  bnc#841720

OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=305
This commit is contained in:
James Fehlig 2013-10-14 22:04:45 +00:00 committed by Git OBS Bridge
parent 6aecdae0d2
commit ec267e5c8f
2 changed files with 10 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
install-apparmor-profiles.patch
View File

@ -57,7 +57,7 @@ Index: libvirt-1.1.2/examples/apparmor/usr.lib.libvirt.virt-aa-helper.in
=================================================================== ===================================================================
--- /dev/null --- /dev/null
+++ libvirt-1.1.2/examples/apparmor/usr.lib.libvirt.virt-aa-helper.in +++ libvirt-1.1.2/examples/apparmor/usr.lib.libvirt.virt-aa-helper.in
@@ -0,0 +1,40 @@ @@ -0,0 +1,41 @@
+# Last Modified: Fri Aug 19 11:21:48 2011 +# Last Modified: Fri Aug 19 11:21:48 2011
+#include <tunables/global> +#include <tunables/global>
+ +
@ -71,6 +71,7 @@ Index: libvirt-1.1.2/examples/apparmor/usr.lib.libvirt.virt-aa-helper.in
+ # needed for when disk is on a network filesystem + # needed for when disk is on a network filesystem
+ network inet, + network inet,
+ +
+ @{PROC}/[0-9]** r,
+ deny @{PROC}/[0-9]*/mounts r, + deny @{PROC}/[0-9]*/mounts r,
+ @{PROC}/filesystems r, + @{PROC}/filesystems r,
+ +

8
libvirt.changes
View File

@ -1,3 +1,11 @@
-------------------------------------------------------------------
Mon Oct 14 16:01:46 MDT 2013 - jfehlig@suse.com
- virt-aa-helper apparmor profile was denying read access to
/proc/$PID/*. Give read accesss to these files.
Updated install-apparmor-profiles.patch
bnc#841720
------------------------------------------------------------------- -------------------------------------------------------------------
Mon Oct 14 13:46:14 MDT 2013 - jfehlig@suse.com Mon Oct 14 13:46:14 MDT 2013 - jfehlig@suse.com