]> git.ipfire.org Git - thirdparty/libvirt.git/commitdiff
apparmor, virt-aa-helper: drop static channel rule
authorChristian Ehrhardt <christian.ehrhardt@canonical.com>
Tue, 9 Jan 2018 15:04:05 +0000 (16:04 +0100)
committerMichal Privoznik <mprivozn@redhat.com>
Tue, 9 Jan 2018 16:29:52 +0000 (17:29 +0100)
This is now covered by DomainSetPathLabel being implemented in apparmor.

Signed-off-by: Christian Ehrhardt <christian.ehrhardt@canonical.com>
src/security/virt-aa-helper.c

index 07ece730e27d2be4be92adcabb54d788825659f0..f7ccae0b022fc269f6db4db8a6a212185035eb21 100644 (file)
@@ -1353,8 +1353,6 @@ main(int argc, char **argv)
                                   LOCALSTATEDIR, ctl->def->name);
                 virBufferAsprintf(&buf, "  \"%s/lib/libvirt/qemu/domain-%d-%.*s/*\" rw,\n",
                                   LOCALSTATEDIR, ctl->def->id, 20, ctl->def->name);
-                virBufferAsprintf(&buf, "  \"%s/lib/libvirt/qemu/channel/target/domain-%d-%.*s/*\" rw,\n",
-                                  LOCALSTATEDIR, ctl->def->id, 20, ctl->def->name);
                 virBufferAsprintf(&buf, "  \"%s/run/libvirt/**/%s.pid\" rwk,\n",
                                   LOCALSTATEDIR, ctl->def->name);
                 virBufferAsprintf(&buf, "  \"/run/libvirt/**/%s.pid\" rwk,\n",