From: intrigeri <intrigeri+libvirt@boum.org>
Date: Tue, 8 Aug 2017 21:57:26 +0000 (+0000)
Subject: apparmor, libvirt-qemu: Allow QEMU to gather information about available host resources.
X-Git-Tag: v3.7.0-rc1~173
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=e7f5d627f93c1c71260d2a795a1227b16b0d3186;p=thirdparty%2Flibvirt.git

apparmor, libvirt-qemu: Allow QEMU to gather information about available host resources.
---

diff --git a/examples/apparmor/libvirt-qemu b/examples/apparmor/libvirt-qemu
index f462d7428c..dcfb1a5985 100644
--- a/examples/apparmor/libvirt-qemu
+++ b/examples/apparmor/libvirt-qemu
@@ -169,3 +169,9 @@
   @{PROC}/device-tree/ r,
   @{PROC}/device-tree/** r,
   /sys/firmware/devicetree/** r,
+
+  # for gathering information about available host resources
+  /sys/devices/system/cpu/ r,
+  /sys/devices/system/node/ r,
+  /sys/devices/system/node/node[0-9]*/meminfo r,
+  /sys/module/vhost/parameters/max_mem_regions r,