]> git.ipfire.org Git - thirdparty/libvirt.git/commit
virt-aa-helper: Add support for smartcard host-certificates
authorArnaud Patard <apatard@hupstream.com>
Thu, 5 Dec 2019 17:11:41 +0000 (18:11 +0100)
committerChristian Ehrhardt <christian.ehrhardt@canonical.com>
Wed, 12 Feb 2020 09:35:04 +0000 (10:35 +0100)
commit800aed46447edb57b16dd84c5347116c5912a3aa
tree915ffff7ae494e476f2f4dc09a7716fbabde3791
parentc4a78d00f8d00ef4ab84c3110ffb6975ed680554
virt-aa-helper: Add support for smartcard host-certificates

When emulating smartcard with host certificates, qemu needs to
be able to read the certificates files. Add necessary code to
add the smartcard certificates file path to the apparmor profile.

Passthrough support has been tested with spicevmc and remote-viewer.

v2:
- Fix CodingStyle
- Add support for 'host' case.
- Add a comment to mention that the passthrough case doesn't need
  some configuration
- Use one rule with '{,*}' instead of two rules.

Signed-off-by: Arnaud Patard <apatard@hupstream.com>
Reviewed-by: Cole Robinson <crobinso@redhat.com>
Acked-by: Christian Ehrhardt <christian.ehrhardt@canonical.com>
src/security/virt-aa-helper.c