File apparmor-revert-3343ab0c.patch of Package libvirt.10506
commit afa138ea287ff8a56ffe99b0dec38596e7c1f370
Author: Jim Fehlig <jfehlig@suse.com>
Date: Fri Sep 21 13:40:49 2018 -0600
Revert "AppArmor: add mount rules needed with additional mediation features brought by Linux 4.14"
This reverts commit 3343ab0cd99c04761c17a36d9af354536df9e741.
Remove unsupported rules from libvirtd apparmor profile for SLE12 SP4.
Index: libvirt-4.0.0/examples/apparmor/usr.sbin.libvirtd
===================================================================
--- libvirt-4.0.0.orig/examples/apparmor/usr.sbin.libvirtd
+++ libvirt-4.0.0/examples/apparmor/usr.sbin.libvirtd
@@ -30,21 +30,6 @@
# Needed for vfio
capability sys_resource,
- mount options=(rw,rslave) -> /,
- mount options=(rw, nosuid) -> /{var/,}run/libvirt/qemu/*.dev/,
-
- mount options=(rw, move) /dev/ -> /{var/,}run/libvirt/qemu/*.dev/,
- mount options=(rw, move) /dev/hugepages/ -> /{var/,}run/libvirt/qemu/*.hugepages/,
- mount options=(rw, move) /dev/mqueue/ -> /{var/,}run/libvirt/qemu/*.mqueue/,
- mount options=(rw, move) /dev/pts/ -> /{var/,}run/libvirt/qemu/*.pts/,
- mount options=(rw, move) /dev/shm/ -> /{var/,}run/libvirt/qemu/*.shm/,
-
- mount options=(rw, move) /{var/,}run/libvirt/qemu/*.dev/ -> /dev/,
- mount options=(rw, move) /{var/,}run/libvirt/qemu/*.hugepages/ -> /dev/hugepages/,
- mount options=(rw, move) /{var/,}run/libvirt/qemu/*.mqueue/ -> /dev/mqueue/,
- mount options=(rw, move) /{var/,}run/libvirt/qemu/*.pts/ -> /dev/pts/,
- mount options=(rw, move) /{var/,}run/libvirt/qemu/*.shm/ -> /dev/shm/,
-
network inet stream,
network inet dgram,
network inet6 stream,