[libvirt] [PATCH 7/8] appmor, libvirt-qemu: Add 9p support

Serge E. Hallyn serge at hallyn.com
Thu May 18 16:21:54 UTC 2017


Mind you I'm not crazy about this.  If this could be toggled with a
default-off config option that would seem better than always giving
these caps to libvirt-qemu.

Quoting Stefan Bader (stefan.bader at canonical.com):
> From: Serge Hallyn <serge.hallyn at ubuntu.com>
> 
> Add fowner and fsetid to libvirt-qemu profile.
> 
> Bug-Ubuntu: https://bugs.launchpad.net/bugs/1378434
> 
> Signed-off-by: Christian Ehrhardt <christian.ehrhardt at canonical.com>
> Signed-off-by: Stefan Bader <stefan.bader at canonical.com>
> ---
>  examples/apparmor/libvirt-qemu | 4 ++++
>  1 file changed, 4 insertions(+)
> 
> diff --git a/examples/apparmor/libvirt-qemu b/examples/apparmor/libvirt-qemu
> index 89466c9..f04ce04 100644
> --- a/examples/apparmor/libvirt-qemu
> +++ b/examples/apparmor/libvirt-qemu
> @@ -13,6 +13,10 @@
>    capability setgid,
>    capability setuid,
>  
> +  # for 9p
> +  capability fsetid,
> +  capability fowner,
> +
>    network inet stream,
>    network inet6 stream,
>  
> -- 
> 2.7.4




More information about the libvir-list mailing list