Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
home:olh:xen-4.7
libvirt-7.0.0
libvirt.apparmor-fixes.patch
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File libvirt.apparmor-fixes.patch of Package libvirt-7.0.0
From: Olaf Hering <olaf@aepfle.de> Date: Wed, 21 Feb 2018 10:03:48 +0000 Subject: apparmor-fixes --- src/security/apparmor/libvirt-qemu | 4 ++++ 1 file changed, 4 insertions(+) --- a/src/security/apparmor/libvirt-qemu +++ b/src/security/apparmor/libvirt-qemu @@ -92,24 +92,25 @@ /usr/share/slof/** r, /usr/share/vgabios/** r, # pki for libvirt-vnc and libvirt-spice (LP: #901272, #1690140) /etc/pki/CA/ r, /etc/pki/CA/* r, /etc/pki/libvirt{,-spice,-vnc}/ r, /etc/pki/libvirt{,-spice,-vnc}/** r, /etc/pki/qemu/ r, /etc/pki/qemu/** r, # the various binaries + /usr/lib64/qemu-*.*/bin/qemu-system-x86_64 rmix, /usr/bin/kvm rmix, /usr/bin/kvm-spice rmix, /usr/bin/qemu rmix, /usr/bin/qemu-aarch64 rmix, /usr/bin/qemu-alpha rmix, /usr/bin/qemu-arm rmix, /usr/bin/qemu-armeb rmix, /usr/bin/qemu-cris rmix, /usr/bin/qemu-i386 rmix, /usr/bin/qemu-kvm rmix, /usr/bin/qemu-m68k rmix, /usr/bin/qemu-microblaze rmix, @@ -179,24 +180,27 @@ /{usr/,}bin/swtpm rmix, /usr/{lib,lib64}/libswtpm_libtpms.so mr, /usr/lib/@{multiarch}/libswtpm_libtpms.so mr, # for save and resume /{usr/,}bin/dash rmix, /{usr/,}bin/dd rmix, /{usr/,}bin/cat rmix, # for restore /{usr/,}bin/bash rmix, + /run/nscd/passwd r, + /run/nscd/group r, + # for usb access /dev/bus/usb/ r, /etc/udev/udev.conf r, /sys/bus/ r, /sys/class/ r, # for rbd /etc/ceph/ceph.conf r, # Various functions will need to enumerate /tmp (e.g. ceph), allow the base # dir and a few known functions like samba support. # We want to avoid to give blanket rw permission to everything under /tmp,
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor