Jim Fehlig 0d05d51b71 apparmor: Allow lxc processes to receive signals from libvirt ... LXC processes confined by apparmor are not permitted to receive signals from libvirtd. Attempting to destroy such a process fails virsh --connect lxc:/// destroy distro_apparmor error: Failed to destroy domain distro_apparmor error: Failed to kill process 29491: Permission denied And from /var/log/audit/audit.log type=AVC msg=audit(1606949706.142:6345): apparmor="DENIED" operation="signal" profile="libvirt-314b7109-fdce-48dc-ad28-7c47958a27c1" pid=29390 comm="libvirtd" requested_mask="receive" denied_mask="receive" signal=term peer="libvirtd" Similar to the libvirt-qemu abstraction, add a rule to the libvirt-lxc abstraction allowing reception of signals from libvirtd. Signed-off-by: Jim Fehlig <jfehlig@suse.com> Reviewed-by: Christian Ehrhardt <christian.ehrhardt@canonical.com>		2020-12-03 16:38:33 -07:00
..
libvirt-lxc	apparmor: Allow lxc processes to receive signals from libvirt	2020-12-03 16:38:33 -07:00
libvirt-qemu	apparmor: allow kvm-spice compat wrapper	2020-11-17 15:56:43 +01:00
meson.build	meson: src/security: install apparmor profile files	2020-08-03 09:27:05 +02:00
TEMPLATE.lxc
TEMPLATE.qemu
usr.lib.libvirt.virt-aa-helper.in	apparmor: Reflect paths from configure in profiles	2020-02-04 09:08:51 +01:00
usr.lib.libvirt.virt-aa-helper.local	meson: src/security: install apparmor profile files	2020-08-03 09:27:05 +02:00
usr.sbin.libvirtd.in	apparmor: Allow /usr/libexec for libxl-save-helper and pygrub	2020-09-24 07:47:34 -06:00