These three patches are generated when trying to make use of
libvirt apparmor security driver in openSUSU 11.4.
Patches fix some typoes and bugs and rename AppArmorSetImageFDLabel
to AppArmorSetFDLabel as the common labeling function that could
be used by domainSetSecurityImageFDLabel and domainSetSecurityTapFDLabel.

tapfd could be seen in the last line in specific profile named
/etc/apparmor.d/libvirt/libvirt-cdbebdfa-1d6d-65c3-be0f-fd74b978a773.files

 # DO NOT EDIT THIS FILE DIRECTLY. IT IS MANAGED BY LIBVIRT.
  "/var/log/libvirt/**/rhel6qcow2.log" w,
  "/var/lib/libvirt/**/rhel6qcow2.monitor" rw,
  "/var/run/libvirt/**/rhel6qcow2.pid" rwk,
  "/run/libvirt/**/rhel6qcow2.pid" rwk,
  "/var/run/libvirt/**/*.tunnelmigrate.dest.rhel6qcow2" rw,
  "/run/libvirt/**/*.tunnelmigrate.dest.rhel6qcow2" rw,
  "/var/lib/libvirt/images/rhel6u3qcow2.img" rw,
  "/dev/tap45" rw,

Guannan Ren(3)
 [PATCH 1/3] apparmor: fix typoes in virt-aa-helper
 [PATCH 2/3] apparmor: no need to check security model
 [PATCH 3/3] apparmor: use AppArmorSetFDLabel for both imageFD and tapFD

 src/security/security_apparmor.c |   22 ++++++----------------
 src/security/virt-aa-helper.c    |    7 +++----
 2 files changed, 9 insertions(+), 20 deletions(-)

--
libvir-list mailing list
libvir-list@redhat.com
https://www.redhat.com/mailman/listinfo/libvir-list

Reply via email to