[libvirt] [PATCH 1/2] Don't output libvirt-UUID.files for LXC apparmor profiles

Eric Blake eblake at redhat.com
Fri Jul 11 17:03:00 UTC 2014


On 07/11/2014 09:22 AM, Serge Hallyn wrote:
> Quoting Cédric Bosdonnat (cbosdonnat at suse.com):
>> ---
>>  src/security/virt-aa-helper.c | 3 ++-
>>  1 file changed, 2 insertions(+), 1 deletion(-)
> 
> Hi,
> 
> I'm acking this anyway bc I think you're right, but I'm trying to
> think of a case where this would still be useful.  What if we want
> to allow only a certain container to have access to its cgroups,
> for instance, for nesting containers.  Would virt-aa-helper and the
> .files be a way this would be done?  I suppose we coudl always re-introduce
> this in that case...  
> 
> Acked-by: Serge E. Hallyn <serge.hallyn at ubuntu.com>

I've pushed this one.

-- 
Eric Blake   eblake redhat com    +1-919-301-3266
Libvirt virtualization library http://libvirt.org

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 604 bytes
Desc: OpenPGP digital signature
URL: <http://listman.redhat.com/archives/libvir-list/attachments/20140711/2d1c4b4c/attachment-0001.sig>


More information about the libvir-list mailing list