[libvirt] [PATCH 2/2] apparmor, virt-aa-helper: allow ipv6
Jamie Strandboge
jamie at canonical.com
Mon Nov 6 17:01:19 UTC 2017
On Fri, 2017-11-03 at 09:46 +0100, Christian Ehrhardt wrote:
> In case ipv6 is used the network inet6 permission is required for
> virt-aa-helper.
>
> Signed-off-by: Christian Ehrhardt <christian.ehrhardt at canonical.com>
> ---
> examples/apparmor/usr.lib.libvirt.virt-aa-helper | 1 +
> 1 file changed, 1 insertion(+)
>
> diff --git a/examples/apparmor/usr.lib.libvirt.virt-aa-helper
> b/examples/apparmor/usr.lib.libvirt.virt-aa-helper
> index 012080c..bd6181d 100644
> --- a/examples/apparmor/usr.lib.libvirt.virt-aa-helper
> +++ b/examples/apparmor/usr.lib.libvirt.virt-aa-helper
> @@ -10,6 +10,7 @@ profile virt-aa-helper
> /usr/{lib,lib64}/libvirt/virt-aa-helper {
>
> # needed for when disk is on a network filesystem
> network inet,
> + network inet6,
>
> deny @{PROC}/[0-9]*/mounts r,
> @{PROC}/[0-9]*/net/psched r,
LGTM. Thanks!
--
Jamie Strandboge | http://www.canonical.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: This is a digitally signed message part
URL: <http://listman.redhat.com/archives/libvir-list/attachments/20171106/aebfbc49/attachment-0001.sig>
More information about the libvir-list
mailing list