[PATCH 6/6] apparmor: Allow some more BIOS/UEFI paths
Jamie Strandboge
jamie at canonical.com
Mon Jan 27 16:37:16 UTC 2020
On Sat, 25 Jan 2020, Michal Privoznik wrote:
> There are two more paths that we are missing in the default
> domain profile: /usr/share/edk2-ovmf/ and /usr/share/sgabios/.
> These exist on my Gentoo box and contain UEFI and BIOS images
> respectively.
>
> Signed-off-by: Michal Privoznik <mprivozn at redhat.com>
> ---
> src/security/apparmor/libvirt-qemu | 2 ++
> 1 file changed, 2 insertions(+)
>
> diff --git a/src/security/apparmor/libvirt-qemu b/src/security/apparmor/libvirt-qemu
> index 2291829270..6942b83969 100644
> --- a/src/security/apparmor/libvirt-qemu
> +++ b/src/security/apparmor/libvirt-qemu
> @@ -75,6 +75,7 @@
> # access to firmware's etc
> /usr/share/AAVMF/** r,
> /usr/share/bochs/** r,
> + /usr/share/edk2-ovmf/** r,
> /usr/share/kvm/** r,
> /usr/share/misc/sgabios.bin r,
> /usr/share/openbios/** r,
> @@ -86,6 +87,7 @@
> /usr/share/qemu-kvm/** r,
> /usr/share/qemu/** r,
> /usr/share/seabios/** r,
> + /usr/share/sgabios/** r,
> /usr/share/slof/** r,
> /usr/share/vgabios/** r,
+1 to apply
--
Jamie Strandboge | http://www.canonical.com
More information about the libvir-list
mailing list