Re: [PATCH] virt-aa-helper: handle more disk images

[Jamie Strandboge <jamie@xxxxxxxxxxxxx>]

On Mon, 2017-12-11 at 16:23 +0100, Cédric Bosdonnat wrote:

...

> diff --git a/examples/apparmor/usr.lib.libvirt.virt-aa-helper
> b/examples/apparmor/usr.lib.libvirt.virt-aa-helper
> index bd6181d00..f3069d369 100644
> --- a/examples/apparmor/usr.lib.libvirt.virt-aa-helper
> +++ b/examples/apparmor/usr.lib.libvirt.virt-aa-helper
> @@ -3,6 +3,7 @@
>  
>  profile virt-aa-helper /usr/{lib,lib64}/libvirt/virt-aa-helper {
>    #include <abstractions/base>
> +  #include <local/usr.lib.libvirt.virt-aa-helper>
>  
>    # needed for searching directories
>    capability dac_override,
> @@ -50,8 +51,11 @@ profile virt-aa-helper
> /usr/{lib,lib64}/libvirt/virt-aa-helper {
>    /var/lib/libvirt/images/ r,
>    /var/lib/libvirt/images/** r,
>    /{media,mnt,opt,srv}/** r,
> +  # For virt-sandbox
> +  /run/libvirt/**/[sv]d[a-z] r
>  
>    /**.img r,
> +  /**.raw r,
>    /**.qcow{,2} r,
>    /**.qed r,
>    /**.vmdk r,

These profile changes LGTM. +1 to apply them. Like intrigeri, I'll let
someone else ACK the build system changes.

-- 
Jamie Strandboge             | http://www.canonical.com

Attachment: signature.asc
Description: This is a digitally signed message part

--
libvir-list mailing list
libvir-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/libvir-list