]> git.ipfire.org Git - thirdparty/libvirt.git/commit
apparmor: allow libvirt to send term signal to unconfined
authorGuido Günther <agx@sigxcpu.org>
Wed, 17 Jan 2018 15:34:01 +0000 (16:34 +0100)
committerMichal Privoznik <mprivozn@redhat.com>
Tue, 6 Feb 2018 16:26:29 +0000 (17:26 +0100)
commit7edcbd02aa088ee0fb721f9cc34d28089b779267
tree51b423960272c278f5feba573bebfd5c3fc82d33
parent792c6d8a68a353c814b4f86436e723f6ba961a98
apparmor: allow libvirt to send term signal to unconfined

Otherwise stopping domains with qemu://session fails like

[164012.338157] audit: type=1400 audit(1516202208.784:99): apparmor="DENIED" operation="signal" profile="/usr/sbin/libvirtd" pid=18835 comm="libvirtd" requested_mask="send" denied_mask="send" signal=term peer="unconfined"
examples/apparmor/usr.sbin.libvirtd