On Tue, Dec 19, 2017 at 5:09 PM, Jamie Strandboge <jamie@xxxxxxxxxxxxx> wrote:
> On Tue, 2017-12-19 at 16:03 +0100, Christian Ehrhardt wrote:
>> From: Jamie Strandboge <jamie@xxxxxxxxxx>
>>
>> Allows (multi-arch enabled) access to libraries under the
>> /usr/lib/@{multiarch}/qemu/*.so path in the Debian/Ubuntu
>> qemu-block-extra package.
>>
>> Bug-Ubuntu: https://bugs.launchpad.net/bugs/1554761
>>
>> Signed-off-by: Christian Ehrhardt <christian.ehrhardt@xxxxxxxxxxxxx>
>> ---
>> examples/apparmor/libvirt-qemu | 3 +++
>> 1 file changed, 3 insertions(+)
>>
>> diff --git a/examples/apparmor/libvirt-qemu
>> b/examples/apparmor/libvirt-qemu
>> index 91d0e02..912b4ac 100644
>> --- a/examples/apparmor/libvirt-qemu
>> +++ b/examples/apparmor/libvirt-qemu
>> @@ -161,6 +161,9 @@
>> /usr/{lib,lib64}/qemu/block-curl.so mr,
>> /usr/{lib,lib64}/qemu/block-rbd.so mr,
>>
>> + # for Debian/Ubuntu qemu-block-extra (LP: #1554761)
>> + /usr/lib/@{multiarch}/qemu/*.so rm,
>> +
>
> +1 as is (though s/rm/mr/ for consistency),
ack
> but on my system I see
> block-curl.so, block-isci.so and block-rdb.so. I think it probably
> makes to adjust this rule block to simply be:
Yeah the number of those so's can change anyway.
The upper path is mostly for rpm systems, but e.g. SuSe is
rpm+apparmor so your suggestion is great.
> /usr/{lib,lib64}/qemu/*.so mr,
> /usr/lib/@{multiarch}/qemu/*.so mr,
--
libvir-list mailing list
libvir-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/libvir-list
