]> git.ipfire.org Git - thirdparty/libvirt.git/commit
apparmor: add attach_disconnected
authorGuido Günther <agx@sigxcpu.org>
Fri, 15 Sep 2017 15:13:16 +0000 (17:13 +0200)
committerGuido Günther <agx@sigxcpu.org>
Mon, 18 Sep 2017 17:06:52 +0000 (19:06 +0200)
commitf305d8a191941d1ea6e036ae9fc02a3164b3e746
treef5562c40a5f7d3e55f99c00fef5b222888bcddb5
parent848b72421f4cd23c31a4ee7b02c021e5a995ee85
apparmor: add attach_disconnected

Otherwise we fail to reconnect to /dev/net/tun opened by libvirtd
like

    [ 8144.507756] audit: type=1400 audit(1505488162.386:38069121): apparmor="DENIED" operation="file_perm" info="Failed name lookup - disconnected path" error=-13 profile="libvirt-5dfcc8a7-b79a-4fa9-a41f-f6271651934c" name="dev/net/tun" pid=9607 comm="qemu-system-x86" requested_mask="r" denied_mask="r" fsuid=117 ouid=0

Reviewed-By: Jamie Strandboge <jamie@canonical.com>
Acked-By: Michal Privoznik <mprivozn@redhat.com>
examples/apparmor/TEMPLATE.lxc
examples/apparmor/TEMPLATE.qemu