[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: [libvirt] [PATCH] apparmor: allow reading cap_last_cap



On 09/03/2014 02:52 PM, Felix Geyer wrote:
> libcap-ng >= 0.7.4 fails when it can't read /sys/kernel/cap_last_cap
> and thus running a qemu guest fails.
> 
> Allow reading cap_last_cap in the libvirt-qemu apparmor abstraction.
> ---
>  examples/apparmor/libvirt-qemu | 1 +
>  1 file changed, 1 insertion(+)
> 
> diff --git a/examples/apparmor/libvirt-qemu b/examples/apparmor/libvirt-qemu
> index 83814ec..1a98182 100644
> --- a/examples/apparmor/libvirt-qemu
> +++ b/examples/apparmor/libvirt-qemu
> @@ -21,6 +21,7 @@
>    /dev/ptmx rw,
>    /dev/kqemu rw,
>    @{PROC}/*/status r,
> +  @{PROC}/sys/kernel/cap_last_cap r,
>  
>    # For hostdev access. The actual devices will be added dynamically
>    /sys/bus/usb/devices/ r,
> 

ACK


-- 
Jamie Strandboge                 http://www.ubuntu.com/

Attachment: signature.asc
Description: OpenPGP digital signature


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]