On 06/05/2016 05:06 AM, Guido Günther wrote:
> otherwise we drop variables like XDG_RUNTIME_DIR with qemu:///session
> and libvirtd faild to find virtlogd's socket.
> ---
> examples/apparmor/usr.sbin.libvirtd | 1 +
> 1 file changed, 1 insertion(+)
>
> diff --git a/examples/apparmor/usr.sbin.libvirtd b/examples/apparmor/usr.sbin.libvirtd
> index 5d606e6..23f70f5 100644
> --- a/examples/apparmor/usr.sbin.libvirtd
> +++ b/examples/apparmor/usr.sbin.libvirtd
> @@ -45,6 +45,7 @@
> /bin/* PUx,
> /sbin/* PUx,
> /usr/bin/* PUx,
> + /usr/sbin/virtlogd pix,
> /usr/sbin/* PUx,
> /lib/udev/scsi_id PUx,
> /usr/{lib,lib64}/xen-common/bin/xen-toolstack PUx,
I took a quick peek and it seems XDC_RUNTIME_DIR is the only environment
variable accessed by virtlogd. So I think this is fine, but soft ACK since I'm
not the apparmor expert here.
BTW, I didn't test this myself but recently received a bug report against
gnome-boxes for the issue and asked those affected to test your patch. I
received positive feedback from at least one user
https://bugzilla.opensuse.org/show_bug.cgi?id=980441
Regards,
Jim
--
libvir-list mailing list
libvir-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/libvir-list