mirror of
https://gitlab.com/libvirt/libvirt.git
synced 2024-08-28 19:41:16 +00:00
apparmor: Make abstractions extensible
Implement the standard AppArmor 3.x abstraction extension approach. Signed-off-by: Andrea Bolognani <abologna@redhat.com> Reviewed-by: Jim Fehlig <jfehlig@suse.com>
This commit is contained in:
parent
84e01d182e
commit
b6092de883
@ -116,3 +116,7 @@
|
|||||||
deny /sys/fs/cgrou[^p]*{,/**} wklx,
|
deny /sys/fs/cgrou[^p]*{,/**} wklx,
|
||||||
deny /sys/fs/cgroup?*{,/**} wklx,
|
deny /sys/fs/cgroup?*{,/**} wklx,
|
||||||
deny /sys/fs?*{,/**} wklx,
|
deny /sys/fs?*{,/**} wklx,
|
||||||
|
|
||||||
|
@BEGIN_APPARMOR_3@
|
||||||
|
include if exists <abstractions/libvirt-lxc.d>
|
||||||
|
@END_APPARMOR_3@
|
||||||
|
@ -271,3 +271,7 @@
|
|||||||
# required for QEMU accessing UEFI nvram variables
|
# required for QEMU accessing UEFI nvram variables
|
||||||
owner /var/lib/libvirt/qemu/nvram/*_VARS.fd rwk,
|
owner /var/lib/libvirt/qemu/nvram/*_VARS.fd rwk,
|
||||||
owner /var/lib/libvirt/qemu/nvram/*_VARS.ms.fd rwk,
|
owner /var/lib/libvirt/qemu/nvram/*_VARS.ms.fd rwk,
|
||||||
|
|
||||||
|
@BEGIN_APPARMOR_3@
|
||||||
|
include if exists <abstractions/libvirt-qemu.d>
|
||||||
|
@END_APPARMOR_3@
|
||||||
|
Loading…
Reference in New Issue
Block a user