File apparmor-revert-b482925c.patch of Package libvirt.11702
commit 8710b1db0d98e9c12f05222160a00f1827be94aa
Author: Jim Fehlig <jfehlig@suse.com>
Date: Fri Sep 21 13:44:41 2018 -0600
Revert "apparmor: support ptrace checks"
This reverts commit b482925c2277e906542faea52ef587a5c0aa1f5f.
Remove unsupported rules from libvirtd apparmor profile for SLE12 SP4.
Index: libvirt-4.0.0/examples/apparmor/usr.sbin.libvirtd
===================================================================
--- libvirt-4.0.0.orig/examples/apparmor/usr.sbin.libvirtd
+++ libvirt-4.0.0/examples/apparmor/usr.sbin.libvirtd
@@ -37,10 +37,6 @@
network packet dgram,
network packet raw,
- ptrace (trace) peer=unconfined,
- ptrace (trace) peer=/usr/sbin/libvirtd,
- ptrace (trace) peer=libvirt-*,
-
# Very lenient profile for libvirtd since we want to first focus on confining
# the guests. Guests will have a very restricted profile.
/ r,