File apparmor-revert-a2028ae7.patch of Package libvirt

Overview Repositories Revisions Requests Users Attributes Meta

File apparmor-revert-a2028ae7.patch of Package libvirt

commit 181d571b9ade39d8514122852ef72c9459b5d854
Author: Jim Fehlig <jfehlig@suse.com>
Date:   Thu Apr 25 15:34:06 2019 -0600

Revert "apparmor: add mediation rules for unconfined guests"
    
    This reverts commit a2028ae7162b293d569335b52286e8ae627f0ba3.
    
    SLE12 apparmor does not support signal mediation.

Index: libvirt-5.1.0/src/security/apparmor/usr.sbin.libvirtd
===================================================================
--- libvirt-5.1.0.orig/src/security/apparmor/usr.sbin.libvirtd
+++ libvirt-5.1.0/src/security/apparmor/usr.sbin.libvirtd
@@ -70,9 +70,6 @@
   # unconfined also required if guests run without security module
   unix (send, receive) type=stream addr=none peer=(label=unconfined),
 
-  # required if guests run unconfined seclabel type='none' but libvirtd is confined
-  signal (read, send) peer=unconfined,
-
   # Very lenient profile for libvirtd since we want to first focus on confining
   # the guests. Guests will have a very restricted profile.
   / r,

Places

File apparmor-revert-a2028ae7.patch of Package libvirt

Places