Hi, the purpose of these patches is to make it possible to put files in restricted_rw that are under a directory that is already in restricted. It was only possible to add the to overrides before so they ended up being rw. Sorry for the incomplete series this morning, hopefully this looks better. The tests pass here and I've added an additional patch checking the new file. Cheers, -- Guido Guido Günther (2): virt-aa-helper: document --probing and --dry-run virt-aa-helper: Simplify restriction logic intrigeri (1): virt-aa-helper: allow access to /usr/share/ovmf/ src/security/virt-aa-helper.c | 34 ++++++++++++++++++++++------------ tests/virt-aa-helper-test | 9 +++++++++ 2 files changed, 31 insertions(+), 12 deletions(-) -- 2.1.4 -- libvir-list mailing list libvir-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/libvir-list