[libvirt] [PATCH 0/4] Couple of apparmor related fixes

Michal Privoznik posted 4 patches 5 years, 2 months ago
Test syntax-check passed
Patches applied successfully (tree, apply log)
git fetch https://github.com/patchew-project/libvirt tags/patchew/cover.1548163995.git.mprivozn@redhat.com
docs/drvqemu.html.in                                   |  2 +-
src/security/Makefile.inc.am                           | 10 +++++-----
...bvirt.virt-aa-helper => usr.libexec.virt-aa-helper} |  6 +++---
src/security/apparmor/usr.sbin.libvirtd                |  6 ++++--
4 files changed, 13 insertions(+), 11 deletions(-)
rename src/security/apparmor/{usr.lib.libvirt.virt-aa-helper => usr.libexec.virt-aa-helper} (90%)
[libvirt] [PATCH 0/4] Couple of apparmor related fixes
Posted by Michal Privoznik 5 years, 2 months ago
Firstly, the virt-aa-helper was never installed under /usr/lib or
/usr/lib64. Since it's introduction it lives under /usr/libexec and
therefore the profile name should reflect that.

Secondly, the profile misses some binaries we use.

And lastly, some other internal binaries are misplaced in the profile.

Michal Prívozník (4):
  apparmor: Fix parthelper, iohelper and virt-aa-helper paths in
    profiles
  apparmor: Allow libvirt to spawn virt-aa-helper and libvirt_lxc
  docs: Fix virt-aa-helper location
  apparmor: Rename virt-aa-helper profile

 docs/drvqemu.html.in                                   |  2 +-
 src/security/Makefile.inc.am                           | 10 +++++-----
 ...bvirt.virt-aa-helper => usr.libexec.virt-aa-helper} |  6 +++---
 src/security/apparmor/usr.sbin.libvirtd                |  6 ++++--
 4 files changed, 13 insertions(+), 11 deletions(-)
 rename src/security/apparmor/{usr.lib.libvirt.virt-aa-helper => usr.libexec.virt-aa-helper} (90%)

-- 
2.19.2

--
libvir-list mailing list
libvir-list@redhat.com
https://www.redhat.com/mailman/listinfo/libvir-list