[libvirt] [PATCH] AppArmor: allow QEMU to set_process_name. (v2)

intrigeri intrigeri+libvirt at boum.org
Tue Dec 6 14:53:54 UTC 2016


https://bugzilla.redhat.com/show_bug.cgi?id=1369281
---
 examples/apparmor/libvirt-qemu | 1 +
 1 file changed, 1 insertion(+)

diff --git a/examples/apparmor/libvirt-qemu b/examples/apparmor/libvirt-qemu
index 11381d4df0..10d2ac958c 100644
--- a/examples/apparmor/libvirt-qemu
+++ b/examples/apparmor/libvirt-qemu
@@ -21,6 +21,7 @@
   /dev/ptmx rw,
   /dev/kqemu rw,
   @{PROC}/*/status r,
+  owner @{PROC}/@{pid}/task/@{tid}/comm rw,
   @{PROC}/sys/kernel/cap_last_cap r,
 
   # For hostdev access. The actual devices will be added dynamically
-- 
2.11.0




More information about the libvir-list mailing list