Re: [PATCH 2/8] apparmor: allow libvirtd to call pygrub

2020-08-03 Thread Jamie Strandboge
On Mon, 03 Aug 2020, Christian Ehrhardt wrote: > From: Stefan Bader > > When using xen through libxl in Debian/Ubuntu it needs to be able to > call pygrub. > > This is placed in a versioned path like /usr/lib/xen-4.11/bin. > In theory the rule could be more strict by rendering the libexec_dir >

[PATCH 2/8] apparmor: allow libvirtd to call pygrub

2020-08-03 Thread Christian Ehrhardt
From: Stefan Bader When using xen through libxl in Debian/Ubuntu it needs to be able to call pygrub. This is placed in a versioned path like /usr/lib/xen-4.11/bin. In theory the rule could be more strict by rendering the libexec_dir setting pkg-config can derive from libbxen-dev. But that would