mirror of
https://github.com/libvirt/libvirt.git
synced 2026-10-02 12:20:06 -05:00
apparmor: allow /usr/lib/qemu/qemu-bridge-helper
This is where e.g. Debian puts it.
This commit is contained in:
1 parent
445708bc77
commit
123cc3e11c
1 file changed
+2
-2
@@ -67,7 +67,7 @@
|
|||||||
# allow changing to our UUID-based named profiles
|
# allow changing to our UUID-based named profiles
|
||||||
change_profile -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*,
|
change_profile -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*,
|
||||||
|
|
||||||
/usr/{lib,libexec}/qemu-bridge-helper Cx -> qemu_bridge_helper,
|
/usr/{lib,lib64,lib/qemu,libexec}/qemu-bridge-helper Cx -> qemu_bridge_helper,
|
||||||
# child profile for bridge helper process
|
# child profile for bridge helper process
|
||||||
profile qemu_bridge_helper {
|
profile qemu_bridge_helper {
|
||||||
#include <abstractions/base>
|
#include <abstractions/base>
|
||||||
@@ -83,6 +83,6 @@
|
|||||||
/etc/qemu/** r,
|
/etc/qemu/** r,
|
||||||
owner @{PROC}/*/status r,
|
owner @{PROC}/*/status r,
|
||||||
|
|
||||||
/usr/{lib,libexec}/qemu-bridge-helper rmix,
|
/usr/{lib,lib64,lib/qemu,libexec}/qemu-bridge-helper rmix,
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
Reference in new issue
Block a user