File apparmor-revert-3b1d19e6.patch of Package libvirt

Overview Repositories Revisions Requests Users Attributes Meta

File apparmor-revert-3b1d19e6.patch of Package libvirt

commit f4795736e73bba3c85f387adc646d6422187d0cb
Author: Jim Fehlig <jfehlig@suse.com>
Date:   Fri Sep 21 13:41:31 2018 -0600

Revert "AppArmor: add rules needed with additional mediation features brought by Linux 4.14."
    
    This reverts commit 3b1d19e6c9500d392b6635de92877b725d214f7f.
    
    Remove unsupported rules from libvirtd apparmor profile for SLE12 SP4.

Index: libvirt-5.1.0/src/security/apparmor/libvirt-qemu
===================================================================
--- libvirt-5.1.0.orig/src/security/apparmor/libvirt-qemu
+++ libvirt-5.1.0/src/security/apparmor/libvirt-qemu
@@ -16,12 +16,6 @@
   network inet stream,
   network inet6 stream,
 
-  ptrace (readby, tracedby) peer=libvirtd,
-  ptrace (readby, tracedby) peer=/usr/sbin/libvirtd,
-
-  signal (receive) peer=libvirtd,
-  signal (receive) peer=/usr/sbin/libvirtd,
-
   /dev/net/tun rw,
   /dev/kvm rw,
   /dev/ptmx rw,
Index: libvirt-5.1.0/src/security/apparmor/usr.sbin.libvirtd
===================================================================
--- libvirt-5.1.0.orig/src/security/apparmor/usr.sbin.libvirtd
+++ libvirt-5.1.0/src/security/apparmor/usr.sbin.libvirtd
@@ -34,7 +34,6 @@
   network inet dgram,
   network inet6 stream,
   network inet6 dgram,
-  network netlink raw,
   network packet dgram,
   network packet raw,
 
@@ -44,10 +43,6 @@
   ptrace (read,trace) peer=/usr/sbin/dnsmasq,
   ptrace (read,trace) peer=libvirt-*,
 
-  signal (send) peer=dnsmasq,
-  signal (send) peer=/usr/sbin/dnsmasq,
-  signal (read, send) peer=libvirt-*,
-
   # Very lenient profile for libvirtd since we want to first focus on confining
   # the guests. Guests will have a very restricted profile.
   / r,

Places

File apparmor-revert-3b1d19e6.patch of Package libvirt

Places