intrigeri 1fff379ff6 AppArmor: allow virt-aa-helper read access to Nova's qcow backing files. ...

As reported on https://bugs.debian.org/892431, without this rule, when launching
a QEMU KVM instance, an error occurs immediately upon launching the QEMU
process such as:

  Could not open backing file: Could not open
  '/var/lib/nova/instances/_base/affe96668a4c64ef380ff1c71b4caec17039080e':
  Permission denied

The other instance disk images are already covered by the existing rule:

  /**/disk{,.*} r

Signed-off-by: intrigeri <intrigeri@boum.org>

2018-06-12 10:43:37 +02:00

..

libvirt-lxc

…

libvirt-qemu

apparmor: add ro rule for sasl GSSAPI plugin on /etc/gss/mech.d/

2018-03-08 17:35:36 +01:00

TEMPLATE.lxc

apparmor: add attach_disconnected

2017-09-18 19:06:52 +02:00

TEMPLATE.qemu

apparmor: add attach_disconnected

2017-09-18 19:06:52 +02:00

usr.lib.libvirt.virt-aa-helper

AppArmor: allow virt-aa-helper read access to Nova's qcow backing files.

2018-06-12 10:43:37 +02:00

usr.sbin.libvirtd

apparmor: add rules to use qemu_bridge_helper

2018-04-12 11:09:29 +02:00