External/libvirt
1
0
Fork 0
mirror of https://gitlab.com/libvirt/libvirt.git synced 2025-01-03 03:25:20 +00:00
Code Issues Packages Projects Releases Wiki Activity

apparmor, libvirtd: Allow ixr to /var/lib/libvirt/virtd*

Browse Source 
This is required for the ebtables functionality added in
libvirt 0.8.0.

Signed-off-by: Stefan Bader <stefan.bader@canonical.com>
This commit is contained in:
Jamie Strandboge 2017-12-19 16:03:43 +01:00 committed by Cédric Bosdonnat
parent 39cb94e575
commit dfd960bca6
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
examples/apparmor/usr.sbin.libvirtd
View File

@ -79,6 +79,10 @@
/usr/{lib,lib64}/xen/bin/* Ux, /usr/{lib,lib64}/xen/bin/* Ux,
/usr/lib/xen-*/bin/libxl-save-helper PUx, /usr/lib/xen-*/bin/libxl-save-helper PUx,
# Required by nwfilter_ebiptables_driver.c:ebiptablesWriteToTempFile() to
# read and run an ebtables script.
/var/lib/libvirt/virtd* ixr,
# force the use of virt-aa-helper # force the use of virt-aa-helper
audit deny /{usr/,}sbin/apparmor_parser rwxl, audit deny /{usr/,}sbin/apparmor_parser rwxl,
audit deny /etc/apparmor.d/libvirt/** wxl, audit deny /etc/apparmor.d/libvirt/** wxl,