[v1] Apparmor support for less common devices

[libvirt] [PATCH 0/4] Apparmor support for less common devices

Christian Ehrhardt posted 4 patches 6 years ago

Diff against v2 v3 v4
Download series mbox

Patches applied successfully (tree, apply log)
git fetch https://github.com/patchew-project/libvirt tags/patchew/1521547701-26292-1-git-send-email-christian.ehrhardt@canonical.com

Test syntax-check passed

There is a newer version of this series

src/security/security_apparmor.c | 101 +++++++++++++++++++++++++++++++++++++++
src/security/virt-aa-helper.c    |  14 ++++++
2 files changed, 115 insertions(+)

Expand all Fold all

[libvirt] [PATCH 0/4] Apparmor support for less common devices

Posted by Christian Ehrhardt 6 years ago

So far users added manual rules for most of these uncommon devices,
but recent changes made some of the callbacks mandatory for hotplug
so we should take shot at implementing them as those callbacks as well
as for the initial start of a guest via virt-aa-helper.

Christian Ehrhardt (4):
  security, apparmor: add (Set|Restore)MemoryLabel
  security, apparmor: add (Set|Restore)InputLabel
  virt-aa-helper: generate rules for passthrough input devices
  virt-aa-helper: generate rules for nvdimm memory

 src/security/security_apparmor.c | 101 +++++++++++++++++++++++++++++++++++++++
 src/security/virt-aa-helper.c    |  14 ++++++
 2 files changed, 115 insertions(+)

-- 
2.7.4

--
libvir-list mailing list
libvir-list@redhat.com
https://www.redhat.com/mailman/listinfo/libvir-list