File apparmor-revert-3b1d19e6.patch of Package libvirt.11620
commit f4795736e73bba3c85f387adc646d6422187d0cb
Author: Jim Fehlig <jfehlig@suse.com>
Date: Fri Sep 21 13:41:31 2018 -0600
Revert "AppArmor: add rules needed with additional mediation features brought by Linux 4.14."
This reverts commit 3b1d19e6c9500d392b6635de92877b725d214f7f.
Remove unsupported rules from libvirtd apparmor profile for SLE12 SP4.
Index: libvirt-4.0.0/examples/apparmor/libvirt-qemu
===================================================================
--- libvirt-4.0.0.orig/examples/apparmor/libvirt-qemu
+++ libvirt-4.0.0/examples/apparmor/libvirt-qemu
@@ -16,10 +16,6 @@
network inet stream,
network inet6 stream,
- ptrace (readby, tracedby) peer=/usr/sbin/libvirtd,
-
- signal (receive) peer=/usr/sbin/libvirtd,
-
/dev/net/tun rw,
/dev/kvm rw,
/dev/ptmx rw,
Index: libvirt-4.0.0/examples/apparmor/usr.sbin.libvirtd
===================================================================
--- libvirt-4.0.0.orig/examples/apparmor/usr.sbin.libvirtd
+++ libvirt-4.0.0/examples/apparmor/usr.sbin.libvirtd
@@ -34,7 +34,6 @@
network inet dgram,
network inet6 stream,
network inet6 dgram,
- network netlink raw,
network packet dgram,
network packet raw,
@@ -43,9 +42,6 @@
ptrace (trace) peer=/usr/sbin/dnsmasq,
ptrace (trace) peer=libvirt-*,
- signal (send) peer=/usr/sbin/dnsmasq,
- signal (read, send) peer=libvirt-*,
-
# Very lenient profile for libvirtd since we want to first focus on confining
# the guests. Guests will have a very restricted profile.
/ r,