[libvirt] [PATCH] apparmor: Adjust path to domain monitor socket

Guido Günther agx at sigxcpu.org
Sat Aug 29 16:16:29 UTC 2015


f1f68ca33 moved the monitor socket to a per domain directory. Adjust the
path accordingly.
---
It'd be nice to have this in 1.2.19 since it unbreaks starting qemu based domains.

 src/security/virt-aa-helper.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/security/virt-aa-helper.c b/src/security/virt-aa-helper.c
index b4a8f27..5de56e5 100644
--- a/src/security/virt-aa-helper.c
+++ b/src/security/virt-aa-helper.c
@@ -1361,7 +1361,7 @@ main(int argc, char **argv)
                 ctl->def->virtType == VIR_DOMAIN_VIRT_KVM) {
                 virBufferAsprintf(&buf, "  \"%s/log/libvirt/**/%s.log\" w,\n",
                                   LOCALSTATEDIR, ctl->def->name);
-                virBufferAsprintf(&buf, "  \"%s/lib/libvirt/**/%s.monitor\" rw,\n",
+                virBufferAsprintf(&buf, "  \"%s/lib/libvirt/qemu/domain-%s/monitor.sock\" rw,\n",
                                   LOCALSTATEDIR, ctl->def->name);
                 virBufferAsprintf(&buf, "  \"%s/run/libvirt/**/%s.pid\" rwk,\n",
                                   LOCALSTATEDIR, ctl->def->name);
-- 
2.1.4




More information about the libvir-list mailing list