From nobody Mon Feb 9 12:25:26 2026 Delivered-To: importer@patchew.org Received-SPF: pass (zohomail.com: domain of redhat.com designates 170.10.129.124 as permitted sender) client-ip=170.10.129.124; envelope-from=libvir-list-bounces@redhat.com; helo=us-smtp-delivery-124.mimecast.com; Authentication-Results: mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of redhat.com designates 170.10.129.124 as permitted sender) smtp.mailfrom=libvir-list-bounces@redhat.com; dmarc=fail(p=quarantine dis=quarantine) header.from=suse.com ARC-Seal: i=1; a=rsa-sha256; t=1687994284; cv=none; d=zohomail.com; s=zohoarc; b=SX3NZwDjQP3p2/KKvkBXXE79Fh0ust3ldBhufAMCBuJKEcT8gsmL/Tcyk88sFwnbYJHTymzCoIh8NBrvzk9eX5eANKRr3AM7KMSrvkG57DJeMFo3KyCWVoaAcd3CFnmeFbSsxL86bL4ExniHemIEgN2vGnISu1/MY7f75mCGFgQ= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com; s=zohoarc; t=1687994284; h=Content-Type:Content-Transfer-Encoding:Cc:Date:From:In-Reply-To:List-Subscribe:List-Post:List-Id:List-Archive:List-Help:List-Unsubscribe:MIME-Version:Message-ID:References:Sender:Subject:To; bh=JXqvn5q5owRw4KRkpKO4XaQm2duaZvWQxtu5o1O5OuY=; b=nfhjvXjto9CY1IQayWz3XPFwgL/spxxDbXs5uvSLufX7FO744S2rqnVN38enMKWOaMT2G0mRca9SUonkUL3CtQkQGPQLUhXJlKUdTLnLn6DE7SRbPcp8KoJ2B/gaNEbzUwqHueLvFSdH3m5wuMRGBTTGW5wzAAuARBMsd/tSmd4= ARC-Authentication-Results: i=1; mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of redhat.com designates 170.10.129.124 as permitted sender) smtp.mailfrom=libvir-list-bounces@redhat.com; dmarc=fail header.from= (p=quarantine dis=quarantine) Return-Path: Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) by mx.zohomail.com with SMTPS id 1687994284095970.9709054410455; Wed, 28 Jun 2023 16:18:04 -0700 (PDT) Received: from mimecast-mx02.redhat.com (mx3-rdu2.redhat.com [66.187.233.73]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id us-mta-653-lgs_qrm0NPSbv7nYTmFy7A-1; Wed, 28 Jun 2023 19:17:59 -0400 Received: from smtp.corp.redhat.com (int-mx01.intmail.prod.int.rdu2.redhat.com [10.11.54.1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mimecast-mx02.redhat.com (Postfix) with ESMTPS id 869E11C04B59; Wed, 28 Jun 2023 23:17:52 +0000 (UTC) Received: from mm-prod-listman-01.mail-001.prod.us-east-1.aws.redhat.com (mm-prod-listman-01.mail-001.prod.us-east-1.aws.redhat.com [10.30.29.100]) by smtp.corp.redhat.com (Postfix) with ESMTP id 739D040C2063; Wed, 28 Jun 2023 23:17:52 +0000 (UTC) Received: from mm-prod-listman-01.mail-001.prod.us-east-1.aws.redhat.com (localhost [IPv6:::1]) by mm-prod-listman-01.mail-001.prod.us-east-1.aws.redhat.com (Postfix) with ESMTP id 4019D1946A41; Wed, 28 Jun 2023 23:17:52 +0000 (UTC) Received: from smtp.corp.redhat.com (int-mx05.intmail.prod.int.rdu2.redhat.com [10.11.54.5]) by mm-prod-listman-01.mail-001.prod.us-east-1.aws.redhat.com (Postfix) with ESMTP id E7F4A1946589 for ; Wed, 28 Jun 2023 23:17:50 +0000 (UTC) Received: by smtp.corp.redhat.com (Postfix) id CB91EF5CD2; Wed, 28 Jun 2023 23:17:50 +0000 (UTC) Received: from mimecast-mx02.redhat.com (mimecast06.extmail.prod.ext.rdu2.redhat.com [10.11.55.22]) by smtp.corp.redhat.com (Postfix) with ESMTPS id C43CEF5CD4 for ; Wed, 28 Jun 2023 23:17:50 +0000 (UTC) Received: from us-smtp-1.mimecast.com (us-smtp-2.mimecast.com [207.211.31.81]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mimecast-mx02.redhat.com (Postfix) with ESMTPS id A66FA185A78B for ; Wed, 28 Jun 2023 23:17:50 +0000 (UTC) Received: from EUR05-AM6-obe.outbound.protection.outlook.com (mail-am6eur05on2071.outbound.protection.outlook.com [40.107.22.71]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id us-mta-491-W4mZ1WOXO5SXqAcR9vmOjw-1; Wed, 28 Jun 2023 19:17:46 -0400 Received: from DB7PR04MB5980.eurprd04.prod.outlook.com (2603:10a6:10:88::11) by PAXPR04MB8111.eurprd04.prod.outlook.com (2603:10a6:102:1c7::9) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6521.26; Wed, 28 Jun 2023 23:17:43 +0000 Received: from DB7PR04MB5980.eurprd04.prod.outlook.com ([fe80::8209:a05f:7b01:24c0]) by DB7PR04MB5980.eurprd04.prod.outlook.com ([fe80::8209:a05f:7b01:24c0%5]) with mapi id 15.20.6521.026; Wed, 28 Jun 2023 23:17:43 +0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1687994283; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post; bh=JXqvn5q5owRw4KRkpKO4XaQm2duaZvWQxtu5o1O5OuY=; b=DH/RWF0DA9HlYFSjNWzizee+K+tH1/JXfekbLXyanVUElBlZbqoOEIeCFnglKPbPzLofC8 vafAwqgE9oue9SWZ0GmM1jiDrSdeMYetS1XO/aHp7NTze2saun8dSuLHW5wQBoihaS4HLA 68LWApGTnVCN4AAKXqgoSWr3kJFhl6g= X-MC-Unique: lgs_qrm0NPSbv7nYTmFy7A-1 X-Original-To: libvir-list@listman.corp.redhat.com X-MC-Unique: W4mZ1WOXO5SXqAcR9vmOjw-1 From: Jim Fehlig To: libvir-list@redhat.com Subject: [PATCH V2 2/3] apparmor: Remove support for passt from apparmor 2.x Date: Wed, 28 Jun 2023 17:15:28 -0600 Message-ID: <20230628231724.14632-3-jfehlig@suse.com> In-Reply-To: <20230628231724.14632-1-jfehlig@suse.com> References: <20230628231724.14632-1-jfehlig@suse.com> X-ClientProxiedBy: MW3PR06CA0021.namprd06.prod.outlook.com (2603:10b6:303:2a::26) To DB7PR04MB5980.eurprd04.prod.outlook.com (2603:10a6:10:88::11) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DB7PR04MB5980:EE_|PAXPR04MB8111:EE_ X-MS-Office365-Filtering-Correlation-Id: d79b5b3f-5ab1-48ce-f899-08db782de034 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0 X-Microsoft-Antispam-Message-Info: r1s0N9PUmMeanu7fuc66m/GA4xGLp815DbgK0lQz2U/Xp6Z+0jHsmhvMJ2sNkib4ZeCBb5G+beS00ElW8hTCu6hTSp38eK2mJAA0z89TVK4Mxh25FKBtSKAM6WIGDtvns3uuJ750oCwCsYmzKhuTbnZdlvxhHhvgEE9OoWDcfJrV3sHwVUo5tlPhwNkLHTXdeZYaRjPttl9S2tfdaprr9+qTP3mddGs4ajqvWsq0yFWYjEYd6RGbw7EKmYSIbd0fGJJHZx5Mf7ZK/I/HAen72hNvkD0EetGrVU0jMRPdoQoc8qr/cd5pAQcY/0yKYIRZyWhHIJTyZse1wiPtLt1jJKMo2k+CY+LVsxaMto34VREUgqmrqFMRRIOpwhM0FBFx2XEF/wsGqMYhh46xfPaThxZJ4GmoxwsKjv4oE+srF8XN/nOsudZ3bkjJMYBcBU8XZRhxKQKN0MJ9mrTltURPmEiqn3j4emrA875YBOpqEJIBFXOuk7VVoFyQJnGpyFm0yMaVp1cd6URTzuBtiMqpSBqzdEU6fcV2ctDoTb8X695Jp0Z5i74GPeQMnL463SSO X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DB7PR04MB5980.eurprd04.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230028)(396003)(39860400002)(366004)(376002)(346002)(136003)(451199021)(1076003)(2906002)(6486002)(6666004)(6512007)(186003)(83380400001)(2616005)(38100700002)(6506007)(41300700001)(86362001)(66476007)(316002)(66946007)(66556008)(6916009)(4326008)(36756003)(8936002)(26005)(8676002)(478600001)(5660300002); DIR:OUT; SFP:1101 X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?VOTZgvmMAxrkwB4/2twCFW6AVJEIqnTmx8qyxnwqx3ywwFK3qc/S1Znlna7c?= =?us-ascii?Q?neBKUSO7O/B/03+tZewLUsanytwiW8ULvFok4wOm4o4lSiINX+OkrHUau8rb?= =?us-ascii?Q?IsXA8DSl97xk4UOoO1j+BfNqC1X6I6cBjxkHCLRpPdfwPCOFy43SO98tbfhZ?= =?us-ascii?Q?vkC9j5j6XY4HDWprujl/3Ep13gYY3Wanrah07dnOdFwp7/u3TORfPqqJogHZ?= =?us-ascii?Q?3K+/E8zoByutTXfRxg7pIYe4tprFEBqAzlYrm5x/4miDHemWFda6WANcFNki?= =?us-ascii?Q?3TYQX2DC6V7fjVeYmdLWsgRx810ve00ujKiJgzxCwg2s1AzM7QqTcp/Mz2c3?= =?us-ascii?Q?exvX4l60EP4d4PwsoyWBcKVVLBJHA0CaxCCN5i/k92hF0qwX2A4EwZQt88I1?= =?us-ascii?Q?wUQeg9ForF14HwBGYN2H2prjFsUQ1ALwgBDcEfoDZnYuFo1lcjepkpbvuEJL?= =?us-ascii?Q?KgV+/JtyLFMwVaj6wVYxRcT2pF/CzDhXCYrZKKZS2jt+M8QteU3spGn3j5Wi?= =?us-ascii?Q?pGjCXcy71vVkUwHPFpmYXMbAD+fOx/W1AkvKlMClcgw7d0++ZqaZiE9q58IW?= =?us-ascii?Q?fK2b7ti+y60SURyozb0grOyeD9ipUcouvjH/B6wxBKPaVbc4t2Ddc1zPxy2a?= =?us-ascii?Q?O7t1HnJHsMBoT2NTKH2zCD94p1M+q8LhF+lr0qzRwb9nQYy0EoO+edCQ2KNH?= =?us-ascii?Q?BiB2XZhHEGe5xizKwwN40Xep7AKtq4ipzldZoW0qi9Ui343GmmLvJ1Pslogh?= =?us-ascii?Q?npRye1iyStNpw2qjh1bMgtO//VmRNHgc6s3Khjs14BK7M6y76sP2ncU/Syh5?= =?us-ascii?Q?dBD+IkXJjG3bI5GczOpC1o9caIik4C7hEJj/u8tLNAYvTRZqnRUiVuxt3frK?= =?us-ascii?Q?/TmSlFhkeGBZXrzJX30ycMHLBBrYme9Bq6DgTKjwREr9b20yEGqcss99sm0X?= =?us-ascii?Q?uKNDDzjpeaK/8nJ4jmWHK/vftmZBXsI4d/yIEL00cHNY0ZGal2saW66c5MAH?= =?us-ascii?Q?cHmT+4XLJNn7WKYEK0VjPQ/i9pYqunk72KA4PgAm8Ro2IV4LSI4dDWdHCsp8?= =?us-ascii?Q?R1Dlq+PYA7+rlyKnOGWctfpkeDBtKqHNya7gPhUxVp/2QoK9JgkaPM5Insh4?= =?us-ascii?Q?WDzyKZq3KFBLWz1rD7mWu09vYywH5L6f20Q6j0PN50kI2jcgX4QnVjqVcSPp?= =?us-ascii?Q?jAU4/e8b8yAOG+5+ScOVfdtsTOmQ4g8aTgYdhLQuSL4omkWjFL8sSysS5DQA?= =?us-ascii?Q?gS9aSLPd3WuX4l1p9MNgl7zcB/Htj8IBnCPZpUmfoL07LVHm6Y4fFafgEw0m?= =?us-ascii?Q?gJpkWXCpTCcuf8/5Do86eV/zOFmdRrDHfD3I2SMkV/rnPH+BRM5recUJIXzJ?= =?us-ascii?Q?ZI7chn0y5+4oQuewtt3uZV9nEvzhkecd+T/vrV9fEjgxKGoDiLdkBa99e1w2?= =?us-ascii?Q?nT8CXq8dEG/oUAKYX0uSaZV6z1XPc14nZeg0B7Y5EqhmOZfl6KHetOsf1xD8?= =?us-ascii?Q?uT+NNmzmMMKFdPH97k8ga/1a+fdaajNZd5V/E7+C9O7OO5wZnjQeahDmbV+d?= =?us-ascii?Q?bO6/zLcc10BQX373ErXQqNJSCurpMy0inCy+YH/n?= X-OriginatorOrg: suse.com X-MS-Exchange-CrossTenant-Network-Message-Id: d79b5b3f-5ab1-48ce-f899-08db782de034 X-MS-Exchange-CrossTenant-AuthSource: DB7PR04MB5980.eurprd04.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 28 Jun 2023 23:17:43.4245 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: f7a17af6-1c5c-4a36-aa8b-f5be247aa4ba X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: piJ4VXrfZGbKGe5ZpuGMANL+p8UW0r/KZ+NNvmSfXXqQOLofFV7RPywdKDTms82BG7+h3btp7nyVmKuHJeW+zQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: PAXPR04MB8111 X-Mimecast-Impersonation-Protect: Policy=CLT - Impersonation Protection Definition; Similar Internal Domain=false; Similar Monitored External Domain=false; Custom External Domain=false; Mimecast External Domain=false; Newly Observed Domain=false; Internal User Name=false; Custom Display Name List=false; Reply-to Address Mismatch=false; Targeted Threat Dictionary=false; Mimecast Threat Dictionary=false; Custom Threat Dictionary=false X-Scanned-By: MIMEDefang 3.1 on 10.11.54.5 X-BeenThere: libvir-list@redhat.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Development discussions about the libvirt library & tools List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: apparmor@cboltz.de Errors-To: libvir-list-bounces@redhat.com Sender: "libvir-list" X-Scanned-By: MIMEDefang 3.1 on 10.11.54.1 X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: suse.com Content-Transfer-Encoding: quoted-printable X-ZohoMail-DKIM: pass (identity @redhat.com) X-ZM-MESSAGEID: 1687994286297100001 Content-Type: text/plain; charset="utf-8" Commit 7a39b04d683f introduced support for passt in the qemu apparmor abstraction, but it contains an 'include if exists' directive that is only stable on apparmor 3.x. Remove support for passt from the 2.x variant of the abstraction. Signed-off-by: Jim Fehlig --- src/security/apparmor-2/libvirt-qemu | 15 --------------- 1 file changed, 15 deletions(-) diff --git a/src/security/apparmor-2/libvirt-qemu b/src/security/apparmor-2= /libvirt-qemu index 44056b5f14..9af1333b22 100644 --- a/src/security/apparmor-2/libvirt-qemu +++ b/src/security/apparmor-2/libvirt-qemu @@ -185,21 +185,6 @@ /usr/{lib,lib64}/libswtpm_libtpms.so mr, /usr/lib/@{multiarch}/libswtpm_libtpms.so mr, =20 - # support for passt network back-end - /usr/bin/passt Cx -> passt, - - profile passt { - /usr/bin/passt r, - - signal (receive) set=3D("term") peer=3D/usr/sbin/libvirtd, - signal (receive) set=3D("term") peer=3Dlibvirtd, - signal (receive) set=3D("term") peer=3Dvirtqemud, - - owner /{,var/}run/libvirt/qemu/passt/* rw, - - include if exists - } - # for save and resume /{usr/,}bin/dash rmix, /{usr/,}bin/dd rmix, --=20 2.41.0