forked from pool/libvirt
- virt-aa-helper apparmor profile was denying read access to
/proc/$PID/*. Give read accesss to these files. Updated install-apparmor-profiles.patch bnc#841720 OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=305
This commit is contained in:
parent
6aecdae0d2
commit
ec267e5c8f
@ -57,7 +57,7 @@ Index: libvirt-1.1.2/examples/apparmor/usr.lib.libvirt.virt-aa-helper.in
|
||||
===================================================================
|
||||
--- /dev/null
|
||||
+++ libvirt-1.1.2/examples/apparmor/usr.lib.libvirt.virt-aa-helper.in
|
||||
@@ -0,0 +1,40 @@
|
||||
@@ -0,0 +1,41 @@
|
||||
+# Last Modified: Fri Aug 19 11:21:48 2011
|
||||
+#include <tunables/global>
|
||||
+
|
||||
@ -71,6 +71,7 @@ Index: libvirt-1.1.2/examples/apparmor/usr.lib.libvirt.virt-aa-helper.in
|
||||
+ # needed for when disk is on a network filesystem
|
||||
+ network inet,
|
||||
+
|
||||
+ @{PROC}/[0-9]** r,
|
||||
+ deny @{PROC}/[0-9]*/mounts r,
|
||||
+ @{PROC}/filesystems r,
|
||||
+
|
||||
|
@ -1,3 +1,11 @@
|
||||
-------------------------------------------------------------------
|
||||
Mon Oct 14 16:01:46 MDT 2013 - jfehlig@suse.com
|
||||
|
||||
- virt-aa-helper apparmor profile was denying read access to
|
||||
/proc/$PID/*. Give read accesss to these files.
|
||||
Updated install-apparmor-profiles.patch
|
||||
bnc#841720
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Oct 14 13:46:14 MDT 2013 - jfehlig@suse.com
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user