[libvirt] [PATCH 02/12] apparmor, libvirt-qemu: Silence lttng related deny messages

[Jamie Strandboge]

On Tue, 2017-12-19 at 16:03 +0100, Christian Ehrhardt wrote:
> From: Stefan Bader <stefan.bader at canonical.com>
> 
> Prevent denial messages related to attempted reads on lttng
> files from spamming the logs.
> 
> Bug-Ubuntu: https://bugs.launchpad.net/bugs/1432644
> 
> Signed-off-by: Christian Ehrhardt <christian.ehrhardt at canonical.com>
> Signed-off-by: Stefan Bader <stefan.bader at canonical.com>
> ---
>  examples/apparmor/libvirt-qemu | 4 ++++
>  1 file changed, 4 insertions(+)
> 
> diff --git a/examples/apparmor/libvirt-qemu
> b/examples/apparmor/libvirt-qemu
> index 77c72a5..651d841 100644
> --- a/examples/apparmor/libvirt-qemu
> +++ b/examples/apparmor/libvirt-qemu
> @@ -191,3 +191,7 @@
>    /sys/devices/system/node/ r,
>    /sys/devices/system/node/node[0-9]*/meminfo r,
>    /sys/module/vhost/parameters/max_mem_regions r,
> +
> +  # silence refusals to open lttng files (see LP: #1432644)
> +  deny /dev/shm/lttng-ust-wait-* r,
> +  deny /run/shm/lttng-ust-wait-* r,

+1 to apply. These are noisy and not needed by typical guests.

-- 
Jamie Strandboge             | http://www.canonical.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: This is a digitally signed message part
URL: <http://listman.redhat.com/archives/libvir-list/attachments/20171219/d4d552d5/attachment-0001.sig>