[libvirt] [PATCH] Apparmor: Support Xen scripts in libexec

Jim Fehlig jfehlig at suse.com
Fri Oct 18 14:51:50 UTC 2019


On 10/18/19 8:31 AM, Andrea Bolognani wrote:
> On Thu, 2019-10-17 at 03:41 +0000, Jim Fehlig wrote:
>> Upstream Xen has traditionally installed various hotplug and
>> utility scripts in /etc/xen/scripts/. openSUSE is slowly moving
>> all distribution provided configuration files and scripts from
>> /etc to /usr. In the case of the Xen scripts provided under
>> /etc/xen/scripts/, they will be moving to /usr/lib/xen/scripts/.
>> Adjust the libvirtd Apparmor profile to allow executing scripts
>> from this location.
>>
>> Signed-off-by: Jim Fehlig <jfehlig at suse.com>
>> ---
>>
>> If this is deemed too distro-specific I'm happy to maintain a
>> downstream patch.
>>
>>   src/security/apparmor/usr.sbin.libvirtd | 1 +
>>   1 file changed, 1 insertion(+)
> 
> I'm no AppArmor expert but this looks sane enough to me, so
> 
>    Reviewed-by: Andrea Bolognani <abologna at redhat.com>

Thanks, but I think I should hold off pushing this until other distros make a 
similar change to the Xen scripts location. We are still debating on when to 
make the change in openSUSE :-). Sorry, I pulled the trigger a bit to early on 
this one.

Regards,
Jim




More information about the libvir-list mailing list