From b4470515f6e5f9c68fd8b07969ecaa6da0db2066 Mon Sep 17 00:00:00 2001 From: Christian Ehrhardt Date: Fri, 3 Nov 2017 09:46:59 +0100 Subject: [PATCH] apparmor, virt-aa-helper: allow ipv6 In case ipv6 is used the network inet6 permission is required for virt-aa-helper. Signed-off-by: Christian Ehrhardt --- examples/apparmor/usr.lib.libvirt.virt-aa-helper | 1 + 1 file changed, 1 insertion(+) diff --git a/examples/apparmor/usr.lib.libvirt.virt-aa-helper b/examples/apparmor/usr.lib.libvirt.virt-aa-helper index 012080c676..bd6181d009 100644 --- a/examples/apparmor/usr.lib.libvirt.virt-aa-helper +++ b/examples/apparmor/usr.lib.libvirt.virt-aa-helper @@ -10,6 +10,7 @@ profile virt-aa-helper /usr/{lib,lib64}/libvirt/virt-aa-helper { # needed for when disk is on a network filesystem network inet, + network inet6, deny @{PROC}/[0-9]*/mounts r, @{PROC}/[0-9]*/net/psched r,