From: Christian Ehrhardt <christian.ehrhardt@canonical.com>
Date: Wed, 3 Jul 2019 10:44:31 +0000 (+0200)
Subject: security: aa-helper: allow virt-aa-helper to read .vhd images
X-Git-Tag: v5.6.0-rc1~214
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=bc85411c494622016d804d56aef7493b291840e7;p=thirdparty%2Flibvirt.git

security: aa-helper: allow virt-aa-helper to read .vhd images

VHD images can be used as any other, so we should add them to the list
of types that virt-aa-helper can read when creating the per-guest rules
for backing files.

Signed-off-by: Christian Ehrhardt <christian.ehrhardt@canonical.com>
Reviewed-by: Andrea Bolognani <abologna@redhat.com>
Acked-by: Jamie Strandboge <jamie@canonical.com>
---

diff --git a/src/security/apparmor/usr.lib.libvirt.virt-aa-helper b/src/security/apparmor/usr.lib.libvirt.virt-aa-helper
index 78994bcda6..bf6bd297d1 100644
--- a/src/security/apparmor/usr.lib.libvirt.virt-aa-helper
+++ b/src/security/apparmor/usr.lib.libvirt.virt-aa-helper
@@ -63,6 +63,7 @@ profile virt-aa-helper /usr/{lib,lib64}/libvirt/virt-aa-helper {
   /**.qcow{,2} r,
   /**.qed r,
   /**.vmdk r,
+  /**.vhd r,
   /**.[iI][sS][oO] r,
   /**/disk{,.*} r,