Re: [PATCH] apparmor: allow libvirt to send term signal to unconfined

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, Feb 6, 2018 at 5:28 PM, Michal Privoznik <mprivozn@xxxxxxxxxx> wrote:
> On 02/06/2018 03:54 PM, Christian Ehrhardt wrote:
>> On Thu, Jan 25, 2018 at 9:09 PM, Jamie Strandboge <jamie@xxxxxxxxxxxxx> wrote:
>>> On Wed, 2018-01-24 at 10:41 +0100, intrigeri wrote:
>>>> Hi,
>>>>
>>>>
>>>> Guido Günther:
>>>>> --- a/examples/apparmor/usr.sbin.libvirtd
>>>>> +++ b/examples/apparmor/usr.sbin.libvirtd
>>>>> @@ -63,7 +63,7 @@
>>>>>    signal (send) peer=/usr/sbin/dnsmasq,
>>>>>    signal (read, send) peer=libvirt-*,
>>>>> -  signal (send) set=("kill") peer=unconfined,
>>>>> +  signal (send) set=("kill", "term") peer=unconfined,
>>>>
>>> LGTM too. +1 to apply.
>>
>> 2 x +1
>> 1x resolved Discussion
>>
>> IMHO nothing should block this from being committed - so ping?
>>
>> +1 from me as well btw
>>
>
> I've just pushed this.

Thanks.

> BTW: haven't DV granted commit access to somebody
> just recently so that they can push these apparmor patches?

There were IRC discussions to get me commit access, but none with the
permissions was around at the time.
except for the unlikely case that all of the rest happened without me
knowing about it, it is not me :-)
If it was someone else, I'd be pleased to know who so we can CC
him/her on such changes.


-- 
Christian Ehrhardt
Software Engineer, Ubuntu Server
Canonical Ltd

--
libvir-list mailing list
libvir-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/libvir-list




[Index of Archives]     [Virt Tools]     [Libvirt Users]     [Lib OS Info]     [Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Big List of Linux Books]     [Yosemite News]     [KDE Users]     [Fedora Tools]

  Powered by Linux