openkylin
/
libvirt
mirror of https://gitee.com/openkylin/libvirt.git
9
0
Fork 0
Code Issues Projects Releases Wiki Activity

apparmor: allow /usr/lib/qemu/qemu-bridge-helper 

This is where e.g. Debian puts it.
This commit is contained in:
Guido Günther 2017-03-17 09:59:42 +01:00
parent 445708bc77
commit 123cc3e11c
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
examples/apparmor/usr.sbin.libvirtd
View File

@ -67,7 +67,7 @@
# allow changing to our UUID-based named profiles # allow changing to our UUID-based named profiles
change_profile -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, change_profile -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*,
/usr/{lib,libexec}/qemu-bridge-helper Cx -> qemu_bridge_helper, /usr/{lib,lib64,lib/qemu,libexec}/qemu-bridge-helper Cx -> qemu_bridge_helper,
# child profile for bridge helper process # child profile for bridge helper process
profile qemu_bridge_helper { profile qemu_bridge_helper {
#include <abstractions/base> #include <abstractions/base>
@ -83,6 +83,6 @@
/etc/qemu/** r, /etc/qemu/** r,
owner @{PROC}/*/status r, owner @{PROC}/*/status r,
/usr/{lib,libexec}/qemu-bridge-helper rmix, /usr/{lib,lib64,lib/qemu,libexec}/qemu-bridge-helper rmix,
} }
} }