From nobody Mon Feb 9 17:35:10 2026 Delivered-To: importer@patchew.org Received-SPF: pass (zohomail.com: domain of redhat.com designates 170.10.129.124 as permitted sender) client-ip=170.10.129.124; envelope-from=libvir-list-bounces@redhat.com; helo=us-smtp-delivery-124.mimecast.com; Authentication-Results: mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of redhat.com designates 170.10.129.124 as permitted sender) smtp.mailfrom=libvir-list-bounces@redhat.com; dmarc=pass(p=none dis=none) header.from=redhat.com ARC-Seal: i=1; a=rsa-sha256; t=1688044517; cv=none; d=zohomail.com; s=zohoarc; b=fgGWQ+6T6SXDJIi9M9dj5p7RTA/zJrtfCSpChrSVL+V1yUMoQntbIN5QCndDsBhEt6gM6GT8Jm8wGyQGaEXu2FNSvcN4p7ouXgIWTxs+C/tunXvaErPkLAEPMBGiq0/CWuvbIshs+6LWcXrld+xGgQiqXwp+KgmSgFVonA3bZTY= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zohomail.com; s=zohoarc; t=1688044517; h=Content-Type:Content-Transfer-Encoding:Date:From:In-Reply-To:List-Subscribe:List-Post:List-Id:List-Archive:List-Help:List-Unsubscribe:MIME-Version:Message-ID:References:Sender:Subject:To; bh=y9ycQwO/iedvUKuXzY/yQmXZN+cxZYSqCDnEVDS4Rrk=; b=C7M/A5GLVsZA7lrgh74/Q7bWL58Kn85HL3henJUm3Ru1UxxUCniaMMZRgNNDr30u/fIgLq50+8ELO01ujGZ3Qnhjjfjeh8klYQD9k9SqLLB2J6CtYY5JPXhh50aSzu4DMQ3wx4U8/0hK/oZmuGfwp/sMDiWVj4BnNkzoUHrp8uk= ARC-Authentication-Results: i=1; mx.zohomail.com; dkim=pass; spf=pass (zohomail.com: domain of redhat.com designates 170.10.129.124 as permitted sender) smtp.mailfrom=libvir-list-bounces@redhat.com; dmarc=pass header.from= (p=none dis=none) Return-Path: Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) by mx.zohomail.com with SMTPS id 1688044517144866.3603382227972; Thu, 29 Jun 2023 06:15:17 -0700 (PDT) Received: from mimecast-mx02.redhat.com (mimecast-mx02.redhat.com [66.187.233.88]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id us-mta-311-Vrh3mI9jNFC64FY2_3DO8w-1; Thu, 29 Jun 2023 09:15:13 -0400 Received: from smtp.corp.redhat.com (int-mx05.intmail.prod.int.rdu2.redhat.com [10.11.54.5]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mimecast-mx02.redhat.com (Postfix) with ESMTPS id 7832B83D31A; Thu, 29 Jun 2023 13:15:04 +0000 (UTC) Received: from mm-prod-listman-01.mail-001.prod.us-east-1.aws.redhat.com (unknown [10.30.29.100]) by smtp.corp.redhat.com (Postfix) with ESMTP id 65AF4F5CE6; Thu, 29 Jun 2023 13:15:04 +0000 (UTC) Received: from mm-prod-listman-01.mail-001.prod.us-east-1.aws.redhat.com (localhost [IPv6:::1]) by mm-prod-listman-01.mail-001.prod.us-east-1.aws.redhat.com (Postfix) with ESMTP id 4C0DB1946A46; Thu, 29 Jun 2023 13:15:04 +0000 (UTC) Received: from smtp.corp.redhat.com (int-mx02.intmail.prod.int.rdu2.redhat.com [10.11.54.2]) by mm-prod-listman-01.mail-001.prod.us-east-1.aws.redhat.com (Postfix) with ESMTP id C8E9019465B6 for ; Thu, 29 Jun 2023 13:15:02 +0000 (UTC) Received: by smtp.corp.redhat.com (Postfix) id BC83340C6CD1; Thu, 29 Jun 2023 13:15:02 +0000 (UTC) Received: from harajuku.usersys.redhat.com (unknown [10.45.226.29]) by smtp.corp.redhat.com (Postfix) with ESMTPS id 505E940C6CCD for ; Thu, 29 Jun 2023 13:15:02 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1688044516; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post; bh=y9ycQwO/iedvUKuXzY/yQmXZN+cxZYSqCDnEVDS4Rrk=; b=Pqm+y6YSRosaIvXTnzmQh4fzbH789gKMXvaW0Gw/biz+AUO+q9K02BW9Gt5OXQm2dwHK5P BHtEpEX+aTOh2JWWhDkxx4USCziBj7DQB4vIIcaE9lQV0QaiC8uPe3I+zXfRexje62bOAF 6ZKh3RUbSLFA4Dc2UMNdsedzxknrLkc= X-MC-Unique: Vrh3mI9jNFC64FY2_3DO8w-1 X-Original-To: libvir-list@listman.corp.redhat.com From: Andrea Bolognani To: libvir-list@redhat.com Subject: [libvirt PATCH 4/8] apparmor: Only support passt on 3.x Date: Thu, 29 Jun 2023 15:14:53 +0200 Message-ID: <20230629131457.248503-5-abologna@redhat.com> In-Reply-To: <20230629131457.248503-1-abologna@redhat.com> References: <20230629131457.248503-1-abologna@redhat.com> MIME-Version: 1.0 X-Scanned-By: MIMEDefang 3.1 on 10.11.54.2 X-BeenThere: libvir-list@redhat.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Development discussions about the libvirt library & tools List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: libvir-list-bounces@redhat.com Sender: "libvir-list" X-Scanned-By: MIMEDefang 3.1 on 10.11.54.5 X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: redhat.com Content-Transfer-Encoding: quoted-printable X-ZohoMail-DKIM: pass (identity @redhat.com) X-ZM-MESSAGEID: 1688044518354100001 Content-Type: text/plain; charset="utf-8"; x-default="true" The subprofile can only work by including the abstraction shipped in the passt package, which we can't assume is present, and 'include if exists' doesn't work well on 2.x. No distro that's stuck on AppArmor 2.x is likely to be shipping passt anyway. Signed-off-by: Andrea Bolognani --- src/security/apparmor/libvirt-qemu.in | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/security/apparmor/libvirt-qemu.in b/src/security/apparmor/= libvirt-qemu.in index 44056b5f14..1548cf23bf 100644 --- a/src/security/apparmor/libvirt-qemu.in +++ b/src/security/apparmor/libvirt-qemu.in @@ -185,6 +185,7 @@ /usr/{lib,lib64}/libswtpm_libtpms.so mr, /usr/lib/@{multiarch}/libswtpm_libtpms.so mr, =20 +@BEGIN_APPARMOR_3@ # support for passt network back-end /usr/bin/passt Cx -> passt, =20 @@ -199,6 +200,7 @@ =20 include if exists } +@END_APPARMOR_3@ =20 # for save and resume /{usr/,}bin/dash rmix, --=20 2.41.0