Re: [PATCH] apparmor: allow kvm-spice compat wrapper

2020-11-19 Thread Jim Fehlig
On 11/17/20 7:11 PM, Neal Gompa wrote: On Tue, Nov 17, 2020 at 11:49 AM Christian Ehrhardt wrote: On Mon, Nov 16, 2020 at 3:28 PM Michal Privoznik wrote: On 11/16/20 1:26 PM, Christian Ehrhardt wrote: 'kvm-spice' is a binary name used to call 'kvm' which actually is a wrapper around qemu-s

Re: [PATCH] apparmor: allow kvm-spice compat wrapper

2020-11-18 Thread Jamie Strandboge
On Tue, 17 Nov 2020, Neal Gompa wrote: > On Tue, Nov 17, 2020 at 11:49 AM Christian Ehrhardt > wrote: > > > > On Mon, Nov 16, 2020 at 3:28 PM Michal Privoznik > > wrote: > > > > > > On 11/16/20 1:26 PM, Christian Ehrhardt wrote: > > > > 'kvm-spice' is a binary name used to call 'kvm' which actu

Re: [PATCH] apparmor: allow kvm-spice compat wrapper

2020-11-18 Thread Christian Ehrhardt
On Wed, Nov 18, 2020 at 10:38 AM Daniel P. Berrangé wrote: > > On Tue, Nov 17, 2020 at 09:11:48PM -0500, Neal Gompa wrote: > > On Tue, Nov 17, 2020 at 11:49 AM Christian Ehrhardt > > wrote: > > > > > > On Mon, Nov 16, 2020 at 3:28 PM Michal Privoznik > > > wrote: > > > > > > > > On 11/16/20 1:2

Re: [PATCH] apparmor: allow kvm-spice compat wrapper

2020-11-18 Thread Michal Privoznik
On 11/18/20 3:11 AM, Neal Gompa wrote: On Tue, Nov 17, 2020 at 11:49 AM Christian Ehrhardt wrote: On Mon, Nov 16, 2020 at 3:28 PM Michal Privoznik wrote: On 11/16/20 1:26 PM, Christian Ehrhardt wrote: 'kvm-spice' is a binary name used to call 'kvm' which actually is a wrapper around qemu-s

Re: [PATCH] apparmor: allow kvm-spice compat wrapper

2020-11-18 Thread Daniel P . Berrangé
On Tue, Nov 17, 2020 at 09:11:48PM -0500, Neal Gompa wrote: > On Tue, Nov 17, 2020 at 11:49 AM Christian Ehrhardt > wrote: > > > > On Mon, Nov 16, 2020 at 3:28 PM Michal Privoznik > > wrote: > > > > > > On 11/16/20 1:26 PM, Christian Ehrhardt wrote: > > > > 'kvm-spice' is a binary name used to c

Re: [PATCH] apparmor: allow kvm-spice compat wrapper

2020-11-17 Thread Neal Gompa
On Tue, Nov 17, 2020 at 11:49 AM Christian Ehrhardt wrote: > > On Mon, Nov 16, 2020 at 3:28 PM Michal Privoznik wrote: > > > > On 11/16/20 1:26 PM, Christian Ehrhardt wrote: > > > 'kvm-spice' is a binary name used to call 'kvm' which actually is a > > > wrapper > > > around qemu-system-x86_64 en

Re: [PATCH] apparmor: allow kvm-spice compat wrapper

2020-11-17 Thread Christian Ehrhardt
On Mon, Nov 16, 2020 at 3:28 PM Michal Privoznik wrote: > > On 11/16/20 1:26 PM, Christian Ehrhardt wrote: > > 'kvm-spice' is a binary name used to call 'kvm' which actually is a wrapper > > around qemu-system-x86_64 enabling kvm acceleration. This isn't in use > > for quite a while anymore, but r

Re: [PATCH] apparmor: allow kvm-spice compat wrapper

2020-11-16 Thread Michal Privoznik
On 11/16/20 1:26 PM, Christian Ehrhardt wrote: 'kvm-spice' is a binary name used to call 'kvm' which actually is a wrapper around qemu-system-x86_64 enabling kvm acceleration. This isn't in use for quite a while anymore, but required to work for compatibility e.g. when migrating in old guests. F

[PATCH] apparmor: allow kvm-spice compat wrapper

2020-11-16 Thread Christian Ehrhardt
'kvm-spice' is a binary name used to call 'kvm' which actually is a wrapper around qemu-system-x86_64 enabling kvm acceleration. This isn't in use for quite a while anymore, but required to work for compatibility e.g. when migrating in old guests. For years this was a symlink kvm-spice->kvm and th