From c0273cd6f28bebb1e9fc2b9f2ec0fd789aeffd33 Mon Sep 17 00:00:00 2001 From: Mike Latimer Date: Mon, 19 Jan 2015 18:25:42 -0700 Subject: [PATCH] Fix apparmor issues for tck The network and nwfilter tests contained in the libvirt-TCK testkit can fail unless access to raw network packets is granted. Without this access, the following apparmor error can be seen while running the tests: apparmor="DENIED" operation="create" parent=1 profile="/usr/sbin/libvirtd" pid=94731 comm="libvirtd" family="packet" sock_type="raw" protocol=768 --- examples/apparmor/usr.sbin.libvirtd | 1 + 1 file changed, 1 insertion(+) diff --git a/examples/apparmor/usr.sbin.libvirtd b/examples/apparmor/usr.sbin.libvirtd index 99178366e9..4a94fff436 100644 --- a/examples/apparmor/usr.sbin.libvirtd +++ b/examples/apparmor/usr.sbin.libvirtd @@ -35,6 +35,7 @@ network inet6 stream, network inet6 dgram, network packet dgram, + network packet raw, # Very lenient profile for libvirtd since we want to first focus on confining # the guests. Guests will have a very restricted profile. -- 2.47.2