]> git.ipfire.org Git - thirdparty/libvirt.git/commit
apparmor: let qemu load old shared objects after upgrades
authorChristian Ehrhardt <christian.ehrhardt@canonical.com>
Mon, 3 Aug 2020 12:03:19 +0000 (14:03 +0200)
committerChristian Ehrhardt <christian.ehrhardt@canonical.com>
Mon, 10 Aug 2020 05:32:07 +0000 (07:32 +0200)
commit3ef2af8ed30f224f953aec63ba1e4be512b2fd7b
treee597ace5178fdfdf6eacb8ea4069b219e0de7f87
parent7c5ef98c007a83205458f490f5d3e9763605eab6
apparmor: let qemu load old shared objects after upgrades

Since [1] qemu can after upgrade fall back to pre-upgrade modules
to still be able to dynamically load qemu-module based features.

The paths for these modules are pre-defined by the code and should
be allowed to be mapped and loaded from which will allow packagers
avoiding the inability of late feature load [2] after package upgrades.

[1]: https://github.com/qemu/qemu/commit/bd83c861
[2]: https://bugs.launchpad.net/ubuntu/+source/qemu/+bug/1847361

Signed-off-by: Christian Ehrhardt <christian.ehrhardt@canonical.com>
Acked-by: Jamie Strandboge <jamie@canonical.com>
Reviewed-by: Andrea Bolognani <abologna@redhat.com>
Reviewed-by: Daniel P. Berrangé <berrange redhat com>
src/security/apparmor/libvirt-qemu