Re: [PATCH 4/8] apparmor: read only access to overcommit_memory

2020-08-03 Thread Jamie Strandboge
On Mon, 03 Aug 2020, Christian Ehrhardt wrote: > From: Jamie Strandboge > > Allow qemu to read @{PROC}/sys/vm/overcommit_memory. > This is read on guest start-up and (as read-only) not a > critical secret that has to stay hidden. > > Signed-off-by: Christian Ehrhardt > Signed-off-by: Stefan Ba

[PATCH 4/8] apparmor: read only access to overcommit_memory

2020-08-03 Thread Christian Ehrhardt
From: Jamie Strandboge Allow qemu to read @{PROC}/sys/vm/overcommit_memory. This is read on guest start-up and (as read-only) not a critical secret that has to stay hidden. Signed-off-by: Christian Ehrhardt Signed-off-by: Stefan Bader Signed-off-by: Jamie Strandboge --- src/security/apparmor