Allow passt to create user namespaces

[PATCH] Allow passt to create user namespaces

Daniel P. Berrangé via Devel posted 1 patch 3 weeks ago

Download mbox

Patches applied successfully (tree, apply log)
git fetch https://github.com/patchew-project/libvirt tags/patchew/20251121121420.3967022-1-berrange@redhat.com

src/security/apparmor/libvirt-qemu | 1 +
1 file changed, 1 insertion(+)

Expand all Fold all

[PATCH] Allow passt to create user namespaces

Posted by Daniel P. Berrangé via Devel 3 weeks ago

From: BlueC0re <bluecore90@googlemail.com>

Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
---

This comes from

  https://gitlab.com/libvirt/libvirt/-/merge_requests/493

I'm willing to add my own SoB since it is trivial, but I would
like a sanity-check from someone more familiar with AppArmor so
re-posting here before pushing.

 src/security/apparmor/libvirt-qemu | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/security/apparmor/libvirt-qemu b/src/security/apparmor/libvirt-qemu
index e4aceacd70..f736b37fe5 100644
--- a/src/security/apparmor/libvirt-qemu
+++ b/src/security/apparmor/libvirt-qemu
@@ -194,6 +194,7 @@
   /usr/bin/passt Cx -> passt,
 
   profile passt {
+    userns,
     /usr/bin/passt r,
 
     signal (receive) set=("term") peer=/usr/sbin/libvirtd,
-- 
2.51.1