apparmor_profiles_local_include

Include local apparmor profile

Forwarded: not-needed

Gbp-Pq: Topic debian
Gbp-Pq: Name apparmor_profiles_local_include.patch

src/security/apparmor/libvirt-lxc

@@ -116,3 +116,6 @@
   deny /sys/fs/cgrou[^p]*{,/**} wklx,
   deny /sys/fs/cgroup?*{,/**} wklx,
   deny /sys/fs?*{,/**} wklx,
+
+  # Site-specific additions and overrides. See local/README for details.
+  #include <local/abstractions/libvirt-lxc>

src/security/apparmor/libvirt-qemu

@@ -253,3 +253,6 @@
   # required for QEMU accessing UEFI nvram variables
   owner /var/lib/libvirt/qemu/nvram/*_VARS.fd rwk,
   owner /var/lib/libvirt/qemu/nvram/*_VARS.ms.fd rwk,
+
+  # Site-specific additions and overrides. See local/README for details.
+  #include <local/abstractions/libvirt-qemu>

src/security/apparmor/usr.lib.libvirt.virt-aa-helper.in

@@ -71,5 +71,6 @@ profile virt-aa-helper @libexecdir@/virt-aa-helper {
   /**.[iI][sS][oO] r,
   /**/disk{,.*} r,
 
+  # Site-specific additions and overrides. See local/README for details.
   #include <local/usr.lib.libvirt.virt-aa-helper>
 }

src/security/apparmor/usr.sbin.libvirtd.in

@@ -138,4 +138,7 @@ profile libvirtd @sbindir@/libvirtd flags=(attach_disconnected) {
 
    /usr/{lib,lib64,lib/qemu,libexec}/qemu-bridge-helper rmix,
   }
+
+  # Site-specific additions and overrides. See local/README for details.
+  #include <local/usr.sbin.libvirtd>
 }