File a3ab6d42-apparmor-conv-libvirtd-named-profile.p... of Package libvirt

Overview Repositories Revisions Requests Users Attributes Meta

File a3ab6d42-apparmor-conv-libvirtd-named-profile.patch of Package libvirt (Revision 0619b9b419d5d54e6fa02e1cd08b42a8)

Currently displaying revision 0619b9b419d5d54e6fa02e1cd08b42a8 , Show latest

commit a3ab6d42d825499af44b8f19f9299e150d9687bc
Author: Jim Fehlig <jfehlig@suse.com>
Date:   Fri Jan 11 17:59:59 2019 -0700

apparmor: convert libvirtd profile to a named profile
    
    Signed-off-by: Jim Fehlig <jfehlig@suse.com>

Index: libvirt-5.0.0/src/security/apparmor/usr.sbin.libvirtd
===================================================================
--- libvirt-5.0.0.orig/src/security/apparmor/usr.sbin.libvirtd
+++ libvirt-5.0.0/src/security/apparmor/usr.sbin.libvirtd
@@ -2,7 +2,7 @@
 #include <tunables/global>
 @{LIBVIRT}="libvirt"
 
-/usr/sbin/libvirtd flags=(attach_disconnected) {
+profile libvirtd /usr/sbin/libvirtd flags=(attach_disconnected) {
   #include <abstractions/base>
   #include <abstractions/dbus>
 
@@ -51,7 +51,7 @@
   unix (send, receive) type=stream addr=none peer=(label=unconfined addr=none),
 
   ptrace (read,trace) peer=unconfined,
-  ptrace (read,trace) peer=/usr/sbin/libvirtd,
+  ptrace (read,trace) peer=@{profile_name},
   ptrace (read,trace) peer=dnsmasq,
   ptrace (read,trace) peer=/usr/sbin/dnsmasq,
   ptrace (read,trace) peer=libvirt-*,
@@ -123,6 +123,7 @@
    # For communication/control from libvirtd
    unix (send, receive) type=stream addr=none peer=(label=/usr/sbin/libvirtd),
    signal (receive) set=("term") peer=/usr/sbin/libvirtd,
+   signal (receive) set=("term") peer=libvirtd,
 
    /dev/net/tun rw,
    /etc/qemu/** r,

Places

File a3ab6d42-apparmor-conv-libvirtd-named-profile.patch of Package libvirt (Revision 0619b9b419d5d54e6fa02e1cd08b42a8)

Places