On Sat, 25 Jan 2020, Michal Privoznik wrote: > There are two more paths that we are missing in the default > domain profile: /usr/share/edk2-ovmf/ and /usr/share/sgabios/. > These exist on my Gentoo box and contain UEFI and BIOS images > respectively. > > Signed-off-by: Michal Privoznik <mprivozn@xxxxxxxxxx> > --- > src/security/apparmor/libvirt-qemu | 2 ++ > 1 file changed, 2 insertions(+) > > diff --git a/src/security/apparmor/libvirt-qemu b/src/security/apparmor/libvirt-qemu > index 2291829270..6942b83969 100644 > --- a/src/security/apparmor/libvirt-qemu > +++ b/src/security/apparmor/libvirt-qemu > @@ -75,6 +75,7 @@ > # access to firmware's etc > /usr/share/AAVMF/** r, > /usr/share/bochs/** r, > + /usr/share/edk2-ovmf/** r, > /usr/share/kvm/** r, > /usr/share/misc/sgabios.bin r, > /usr/share/openbios/** r, > @@ -86,6 +87,7 @@ > /usr/share/qemu-kvm/** r, > /usr/share/qemu/** r, > /usr/share/seabios/** r, > + /usr/share/sgabios/** r, > /usr/share/slof/** r, > /usr/share/vgabios/** r, +1 to apply -- Jamie Strandboge | http://www.canonical.com
