libvirt/src/security
Jamie Strandboge 3d7320403b update apparmor security driver for new udev paths
In the Ubuntu development release we recently got a new udev that
moves /var/run to /run, /var/lock to /run/lock and /dev/shm to /run/shm.
This change in udev requires updating the apparmor security driver in
libvirt[1].

Attached is a patch that:
 * adjusts src/security/virt-aa-helper.c to allow both
LOCALSTATEDIR/run/libvirt/**/%s.pid and /run/libvirt/**/%s.pid. While
the profile is not as precise, LOCALSTATEDIR/run/ is typically a symlink
to /run/ anyway, so there is no additional access (remember that
apparmor resolves symlinks, which is why this is still required even
if /var/run points to /run).
 * adjusts example/apparmor/libvirt-qemu paths for /dev/shm

[1]https://launchpad.net/bugs/810270

--
Jamie Strandboge             | http://www.canonical.com
2011-07-14 11:41:48 -06:00
..
security_apparmor.c apparmor: Finish incomplete renaming of relabel to norelabel 2011-07-06 14:15:05 +02:00
security_apparmor.h Refactor the security drivers to simplify usage 2011-01-10 18:10:52 +00:00
security_dac.c Add a virSecurityManagerSetProcessFDLabel 2011-06-28 16:39:30 +01:00
security_dac.h Refactor the security drivers to simplify usage 2011-01-10 18:10:52 +00:00
security_driver.c Refactor the security drivers to simplify usage 2011-01-10 18:10:52 +00:00
security_driver.h Add a virSecurityManagerSetProcessFDLabel 2011-06-28 16:39:30 +01:00
security_manager.c Add a virSecurityManagerSetProcessFDLabel 2011-06-28 16:39:30 +01:00
security_manager.h Add a virSecurityManagerSetProcessFDLabel 2011-06-28 16:39:30 +01:00
security_nop.c Add a function to the security driver API that sets the label of an open fd. 2011-01-26 09:03:11 -05:00
security_nop.h Refactor the security drivers to simplify usage 2011-01-10 18:10:52 +00:00
security_selinux.c Fix default value of security label 'relabel' attribute 2011-07-06 12:45:09 +01:00
security_selinux.h Refactor the security drivers to simplify usage 2011-01-10 18:10:52 +00:00
security_stack.c Add a virSecurityManagerSetProcessFDLabel 2011-06-28 16:39:30 +01:00
security_stack.h Refactor the security drivers to simplify usage 2011-01-10 18:10:52 +00:00
virt-aa-helper.c update apparmor security driver for new udev paths 2011-07-14 11:41:48 -06:00