[libvirt] [PATCH 1/2] Don't output libvirt-UUID.files for LXC apparmor profiles

Cedric Bosdonnat cbosdonnat at suse.com
Fri Jul 11 18:34:24 UTC 2014


On Fri, 2014-07-11 at 11:03 -0600, Eric Blake wrote:
> On 07/11/2014 09:22 AM, Serge Hallyn wrote:
> > Quoting Cédric Bosdonnat (cbosdonnat at suse.com):
> >> ---
> >>  src/security/virt-aa-helper.c | 3 ++-
> >>  1 file changed, 2 insertions(+), 1 deletion(-)
> > 
> > Hi,
> > 
> > I'm acking this anyway bc I think you're right, but I'm trying to
> > think of a case where this would still be useful.  What if we want
> > to allow only a certain container to have access to its cgroups,
> > for instance, for nesting containers.  Would virt-aa-helper and the
> > .files be a way this would be done?  I suppose we coudl always re-introduce
> > this in that case...  
> > 
> > Acked-by: Serge E. Hallyn <serge.hallyn at ubuntu.com>
> 
> I've pushed this one.
> 

Huh, I found a regression with this one... sent a v2 earlier today.

--
Cedric




More information about the libvir-list mailing list