[libvirt] [PATCH v2 4/4] apparmor, virt-aa-helper: drop static channel rule
Christian Ehrhardt
christian.ehrhardt at canonical.com
Tue Jan 9 15:04:05 UTC 2018
This is now covered by DomainSetPathLabel being implemented in apparmor.
Signed-off-by: Christian Ehrhardt <christian.ehrhardt at canonical.com>
---
src/security/virt-aa-helper.c | 2 --
1 file changed, 2 deletions(-)
diff --git a/src/security/virt-aa-helper.c b/src/security/virt-aa-helper.c
index 07ece73..f7ccae0 100644
--- a/src/security/virt-aa-helper.c
+++ b/src/security/virt-aa-helper.c
@@ -1353,8 +1353,6 @@ main(int argc, char **argv)
LOCALSTATEDIR, ctl->def->name);
virBufferAsprintf(&buf, " \"%s/lib/libvirt/qemu/domain-%d-%.*s/*\" rw,\n",
LOCALSTATEDIR, ctl->def->id, 20, ctl->def->name);
- virBufferAsprintf(&buf, " \"%s/lib/libvirt/qemu/channel/target/domain-%d-%.*s/*\" rw,\n",
- LOCALSTATEDIR, ctl->def->id, 20, ctl->def->name);
virBufferAsprintf(&buf, " \"%s/run/libvirt/**/%s.pid\" rwk,\n",
LOCALSTATEDIR, ctl->def->name);
virBufferAsprintf(&buf, " \"/run/libvirt/**/%s.pid\" rwk,\n",
--
2.7.4
More information about the libvir-list
mailing list