[libvirt] [PATCH 04/12] apparmor, libvirt-qemu: Allow read access to max_mem_regions

[Jamie Strandboge]

On Tue, 2017-12-19 at 16:03 +0100, Christian Ehrhardt wrote:
> From: Serge Hallyn <serge.hallyn at ubuntu.com>
> 
> Allows read access to /sys/module/vhost/parameters/max_mem_regions.
> 
> Bug-Ubuntu: https://bugs.launchpad.net/bugs/1531564
> 
> Signed-off-by: Stefan Bader <stefan.bader at canonical.com>
> ---
>  examples/apparmor/libvirt-qemu | 2 ++
>  1 file changed, 2 insertions(+)
> 
> diff --git a/examples/apparmor/libvirt-qemu
> b/examples/apparmor/libvirt-qemu
> index b9e45bd..91d0e02 100644
> --- a/examples/apparmor/libvirt-qemu
> +++ b/examples/apparmor/libvirt-qemu
> @@ -38,6 +38,8 @@
>    /sys/devices/system/node/node[0-9]*/meminfo r,
>    /sys/devices/system/cpu/ r,
>  
> +  /sys/module/vhost/parameters/max_mem_regions r,
> +

+1 to apply

-- 
Jamie Strandboge             | http://www.canonical.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: This is a digitally signed message part
URL: <http://listman.redhat.com/archives/libvir-list/attachments/20171219/d603a3fd/attachment-0001.sig>