[PATCH] security: Add support for SUSE edk2 firmware paths

[Michal Prívozník]

On 2/23/23 19:13, Jim Fehlig wrote:
> SUSE installs edk2 firmwares for both x86_64 and aarch64 in /usr/share/qemu.
> Add support for this path in virt-aa-helper and allow locking files within
> the path in the libvirt qemu abstraction.
> 
> Signed-off-by: Jim Fehlig <jfehlig at suse.com>
> ---
> 
> FYI, I'm fine maintaining this patch downstream if such distro-specific
> change is unwanted upstream. I've already maintained the virt-aa-helper
> hunk for several years.

I think it makes sense to have it upstream. I too try to upstream gentoo
downstream patches (unless they are very gentoo specific).

> 
>  src/security/apparmor/libvirt-qemu | 2 +-
>  src/security/virt-aa-helper.c      | 1 +
>  2 files changed, 2 insertions(+), 1 deletion(-)
> 
Reviewed-by: Michal Privoznik <mprivozn at redhat.com>

Michal