[libvirt] [PATCH v2 0/3] virt-aa-helper: allow to add R/O files in restricted dirs

Martin Kletzander mkletzan at redhat.com
Fri Aug 21 21:44:49 UTC 2015


On Fri, Aug 21, 2015 at 03:31:59PM +0200, Guido Günther wrote:
>Hi,
>the purpose of these patches is to make it possible to put
>files in restricted_rw that are under a directory that is
>already in restricted. It was only possible to add the to
>overrides before so they ended up being rw.
>
>Sorry for the incomplete series this morning, hopefully this looks better.  The
>tests pass here and I've added an additional patch checking the new file.
>
>Cheers,
> -- Guido
>

I have no way to check for the virt-aa-helper test, so limited ACK
from me.

>Guido Günther (2):
>  virt-aa-helper: document --probing and --dry-run
>  virt-aa-helper: Simplify restriction logic
>
>intrigeri (1):
>  virt-aa-helper: allow access to /usr/share/ovmf/
>
> src/security/virt-aa-helper.c | 34 ++++++++++++++++++++++------------
> tests/virt-aa-helper-test     |  9 +++++++++
> 2 files changed, 31 insertions(+), 12 deletions(-)
>
>--
>2.1.4
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/libvir-list/attachments/20150821/fb302b9e/attachment-0001.sig>


More information about the libvir-list mailing list