File apparmor-revert-1262cbf3.patch of Package libvirt

Overview Repositories Revisions Requests Users Attributes Meta

File apparmor-revert-1262cbf3.patch of Package libvirt

commit 8f517a15c8a5eb6f2f459b18041da22ea4542b20
Author: Jim Fehlig <jfehlig@suse.com>
Date:   Thu Apr 25 15:35:30 2019 -0600

Revert "apparmor: allow openGraphicsFD for virt manager >1.4"
    
    This reverts commit 1262cbf3a07f361f4417ccd9076d98b13f4cd223.
    
    SLE12 apparmor does not support unix socket mediation.

Index: libvirt-5.1.0/src/security/apparmor/libvirt-qemu
===================================================================
--- libvirt-5.1.0.orig/src/security/apparmor/libvirt-qemu
+++ libvirt-5.1.0/src/security/apparmor/libvirt-qemu
@@ -203,9 +203,6 @@
   @{PROC}/device-tree/** r,
   /sys/firmware/devicetree/** r,
 
-  # allow connect with openGraphicsFD to work
-  unix (send, receive) type=stream addr=none peer=(label=/usr/sbin/libvirtd),
-
   # for gathering information about available host resources
   /sys/devices/system/cpu/ r,
   /sys/devices/system/node/ r,
Index: libvirt-5.1.0/src/security/apparmor/usr.sbin.libvirtd
===================================================================
--- libvirt-5.1.0.orig/src/security/apparmor/usr.sbin.libvirtd
+++ libvirt-5.1.0/src/security/apparmor/usr.sbin.libvirtd
@@ -65,11 +65,6 @@
   unix (send, receive) type=stream addr=none peer=(label=/usr/sbin/libvirtd//qemu_bridge_helper),
   signal (send) set=("term") peer=/usr/sbin/libvirtd//qemu_bridge_helper,
 
-  # allow connect with openGraphicsFD, direction reversed in newer versions
-  unix (send, receive) type=stream addr=none peer=(label=libvirt-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*),
-  # unconfined also required if guests run without security module
-  unix (send, receive) type=stream addr=none peer=(label=unconfined),
-
   # Very lenient profile for libvirtd since we want to first focus on confining
   # the guests. Guests will have a very restricted profile.
   / r,

Places

File apparmor-revert-1262cbf3.patch of Package libvirt

Places