[libvirt] [PATCH 07/12] apparmor, libvirt-qemu: add default pki path of lbvirt-spice

Christian Ehrhardt christian.ehrhardt at canonical.com
Tue Dec 19 15:03:40 UTC 2017

Adding the PKI path that is used as default suggestion in src/qemu/qemu.conf
If people use non-default paths they should use local overrides but the
suggested defaults we should open up.

This is the default path as referenced by src/qemu/qemu.conf in libvirt.

Bug-Ubuntu: https://bugs.launchpad.net/bugs/1690140

Signed-off-by: Christian Ehrhardt <christian.ehrhardt at canonical.com>
 examples/apparmor/libvirt-qemu | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/examples/apparmor/libvirt-qemu b/examples/apparmor/libvirt-qemu
index bb30530..5d811f9 100644
--- a/examples/apparmor/libvirt-qemu
+++ b/examples/apparmor/libvirt-qemu
@@ -170,6 +170,10 @@
   /etc/pki/libvirt/ r,
   /etc/pki/libvirt/** r,
+  # for use by libvirt-spice (LP: #1690140)
+  /etc/pki/libvirt-spice/ r,
+  /etc/pki/libvirt-spice/** r,
   # for save and resume
   /{usr/,}bin/dash rmix,
   /{usr/,}bin/dd rmix,

More information about the libvir-list mailing list