File libvirt.apparmor-fixes.patch of Package libvirt-7.0.0

Overview Repositories Revisions Requests Users Attributes Meta

File libvirt.apparmor-fixes.patch of Package libvirt-7.0.0

From: Olaf Hering <olaf@aepfle.de>
Date: Wed, 21 Feb 2018 10:03:48 +0000
Subject: apparmor-fixes

---
 src/security/apparmor/libvirt-qemu | 4 ++++
 1 file changed, 4 insertions(+)

--- a/src/security/apparmor/libvirt-qemu
+++ b/src/security/apparmor/libvirt-qemu
@@ -92,24 +92,25 @@
   /usr/share/slof/** r,
   /usr/share/vgabios/** r,
 
   # pki for libvirt-vnc and libvirt-spice (LP: #901272, #1690140)
   /etc/pki/CA/ r,
   /etc/pki/CA/* r,
   /etc/pki/libvirt{,-spice,-vnc}/ r,
   /etc/pki/libvirt{,-spice,-vnc}/** r,
   /etc/pki/qemu/ r,
   /etc/pki/qemu/** r,
 
   # the various binaries
+  /usr/lib64/qemu-*.*/bin/qemu-system-x86_64 rmix,
   /usr/bin/kvm rmix,
   /usr/bin/kvm-spice rmix,
   /usr/bin/qemu rmix,
   /usr/bin/qemu-aarch64 rmix,
   /usr/bin/qemu-alpha rmix,
   /usr/bin/qemu-arm rmix,
   /usr/bin/qemu-armeb rmix,
   /usr/bin/qemu-cris rmix,
   /usr/bin/qemu-i386 rmix,
   /usr/bin/qemu-kvm rmix,
   /usr/bin/qemu-m68k rmix,
   /usr/bin/qemu-microblaze rmix,
@@ -179,24 +180,27 @@
   /{usr/,}bin/swtpm rmix,
   /usr/{lib,lib64}/libswtpm_libtpms.so mr,
   /usr/lib/@{multiarch}/libswtpm_libtpms.so mr,
 
   # for save and resume
   /{usr/,}bin/dash rmix,
   /{usr/,}bin/dd rmix,
   /{usr/,}bin/cat rmix,
 
   # for restore
   /{usr/,}bin/bash rmix,
 
+  /run/nscd/passwd r,
+  /run/nscd/group r,
+
   # for usb access
   /dev/bus/usb/ r,
   /etc/udev/udev.conf r,
   /sys/bus/ r,
   /sys/class/ r,
 
   # for rbd
   /etc/ceph/ceph.conf r,
 
   # Various functions will need to enumerate /tmp (e.g. ceph), allow the base
   # dir and a few known functions like samba support.
   # We want to avoid to give blanket rw permission to everything under /tmp,

Places

File libvirt.apparmor-fixes.patch of Package libvirt-7.0.0

Places