libvirt/src/security
Jim Fehlig 70c2933da2 apparmor: Add support for named profiles
Upstream apparmor is switching to named profiles. In short,

/usr/sbin/dnsmasq {

becomes

profile dnsmasq /usr/sbin/dnsmasq {

Consequently, any profiles that reference profiles in a peer= condition
need to be updated if the referenced profile switches to a named profile.
Apparmor commit 9ab45d81 switched dnsmasq to a named profile. ATM it is
the only named profile switch that has affected libvirt. Add rules to the
libvirtd profile to reference dnsmasq in peer= conditions by profile name.

Signed-off-by: Jim Fehlig <jfehlig@suse.com>
2019-01-23 11:10:15 -07:00
..
apparmor apparmor: Add support for named profiles 2019-01-23 11:10:15 -07:00
Makefile.inc.am apparmor: Move static data out of examples/ 2019-01-10 16:48:12 +01:00
security_apparmor.c qemu: use line breaks in command line args written to log 2018-12-17 15:02:11 +00:00
security_apparmor.h Enforce a standard header file guard symbol name 2018-12-14 10:47:13 +00:00
security_dac.c virSecurityDACRestoreImageLabelInt: Restore even shared/RO disks 2018-12-19 15:32:21 +01:00
security_dac.h Enforce a standard header file guard symbol name 2018-12-14 10:47:13 +00:00
security_driver.c Remove all Author(s): lines from source file headers 2018-12-13 16:08:38 +00:00
security_driver.h Enforce a standard header file guard symbol name 2018-12-14 10:47:13 +00:00
security_manager.c Remove all Author(s): lines from source file headers 2018-12-13 16:08:38 +00:00
security_manager.h Enforce a standard header file guard symbol name 2018-12-14 10:47:13 +00:00
security_nop.c security: introduce virSecurityManager(Set|Restore)ChardevLabel 2017-12-05 13:54:48 +01:00
security_nop.h Enforce a standard header file guard symbol name 2018-12-14 10:47:13 +00:00
security_selinux.c security: Fix comparison for virSecuritySELinuxRecallLabel 2018-12-21 06:03:44 -05:00
security_selinux.h Enforce a standard header file guard symbol name 2018-12-14 10:47:13 +00:00
security_stack.c virSecurityManagerTransactionCommit: Do metadata locking iff enabled in config 2018-11-16 13:42:38 +01:00
security_stack.h Enforce a standard header file guard symbol name 2018-12-14 10:47:13 +00:00
security_util.c security: Include security_util 2018-12-19 15:31:56 +01:00
security_util.h security: Include security_util 2018-12-19 15:31:56 +01:00
virt-aa-helper.c virt-aa-helper: generate rules for gl enabled graphics devices 2019-01-23 07:54:58 +01:00