]> git.ipfire.org Git - thirdparty/libvirt.git/commit
apparmor: read only access to overcommit_memory
authorJamie Strandboge <jamie@ubuntu.com>
Mon, 3 Aug 2020 11:41:33 +0000 (13:41 +0200)
committerChristian Ehrhardt <christian.ehrhardt@canonical.com>
Mon, 10 Aug 2020 05:32:06 +0000 (07:32 +0200)
commite16967fd6edc21a69fe86e1d1006a2e69fa6cf2a
tree5804a4fd8ff01e5e6905e6d44ca28d9c34ccca88
parent8b6ee1afdb664ef5d90e1a92b69fc9f2f9221090
apparmor: read only access to overcommit_memory

Allow qemu to read @{PROC}/sys/vm/overcommit_memory.
This is read on guest start-up and (as read-only) not a
critical secret that has to stay hidden.

Signed-off-by: Christian Ehrhardt <christian.ehrhardt@canonical.com>
Signed-off-by: Stefan Bader <stefan.bader@canonical.com>
Signed-off-by: Jamie Strandboge <jamie@ubuntu.com>
Reviewed-by: Andrea Bolognani <abologna@redhat.com>
src/security/apparmor/libvirt-qemu