[PATCH 0/3] apparmor: bug and typo fix and add tapFD relabeling

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



These three patches are generated when trying to make use of
libvirt apparmor security driver in openSUSU 11.4.
Patches fix some typoes and bugs and rename AppArmorSetImageFDLabel
to AppArmorSetFDLabel as the common labeling function that could
be used by domainSetSecurityImageFDLabel and domainSetSecurityTapFDLabel.

tapfd could be seen in the last line in specific profile named
/etc/apparmor.d/libvirt/libvirt-cdbebdfa-1d6d-65c3-be0f-fd74b978a773.files

 # DO NOT EDIT THIS FILE DIRECTLY. IT IS MANAGED BY LIBVIRT.
  "/var/log/libvirt/**/rhel6qcow2.log" w,
  "/var/lib/libvirt/**/rhel6qcow2.monitor" rw,
  "/var/run/libvirt/**/rhel6qcow2.pid" rwk,
  "/run/libvirt/**/rhel6qcow2.pid" rwk,
  "/var/run/libvirt/**/*.tunnelmigrate.dest.rhel6qcow2" rw,
  "/run/libvirt/**/*.tunnelmigrate.dest.rhel6qcow2" rw,
  "/var/lib/libvirt/images/rhel6u3qcow2.img" rw,
  "/dev/tap45" rw,

Guannan Ren(3)
 [PATCH 1/3] apparmor: fix typoes in virt-aa-helper
 [PATCH 2/3] apparmor: no need to check security model
 [PATCH 3/3] apparmor: use AppArmorSetFDLabel for both imageFD and tapFD

 src/security/security_apparmor.c |   22 ++++++----------------
 src/security/virt-aa-helper.c    |    7 +++----
 2 files changed, 9 insertions(+), 20 deletions(-)

--
libvir-list mailing list
libvir-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/libvir-list


[Index of Archives]     [Virt Tools]     [Libvirt Users]     [Lib OS Info]     [Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Big List of Linux Books]     [Yosemite News]     [KDE Users]     [Fedora Tools]