mirror of
https://gitlab.com/libvirt/libvirt.git
synced 2025-03-07 17:28:15 +00:00
apparmor: Make abstractions extensible
Implement the standard AppArmor 3.x abstraction extension approach. Signed-off-by: Andrea Bolognani <abologna@redhat.com> Reviewed-by: Jim Fehlig <jfehlig@suse.com>
This commit is contained in:
parent
84e01d182e
commit
b6092de883
@ -116,3 +116,7 @@
|
||||
deny /sys/fs/cgrou[^p]*{,/**} wklx,
|
||||
deny /sys/fs/cgroup?*{,/**} wklx,
|
||||
deny /sys/fs?*{,/**} wklx,
|
||||
|
||||
@BEGIN_APPARMOR_3@
|
||||
include if exists <abstractions/libvirt-lxc.d>
|
||||
@END_APPARMOR_3@
|
||||
|
@ -271,3 +271,7 @@
|
||||
# required for QEMU accessing UEFI nvram variables
|
||||
owner /var/lib/libvirt/qemu/nvram/*_VARS.fd rwk,
|
||||
owner /var/lib/libvirt/qemu/nvram/*_VARS.ms.fd rwk,
|
||||
|
||||
@BEGIN_APPARMOR_3@
|
||||
include if exists <abstractions/libvirt-qemu.d>
|
||||
@END_APPARMOR_3@
|
||||
|
Loading…
x
Reference in New Issue
Block a user