Re: [PATCH 5/8] apparmor: qemu access to @{PROC}/*/auxv for hw_cap

On Mon, Aug 3, 2020 at 5:07 PM Jamie Strandboge wrote: > On Mon, 03 Aug 2020, Christian Ehrhardt wrote: > > > From: Stefan Bader > > > > On some architectures (ppc, s390x, sparc, arm) qemu will read auxv > > to detect hardware capabilities via qemu_getauxval. > > > > Allow that access read-only

Re: [PATCH 5/8] apparmor: qemu access to @{PROC}/*/auxv for hw_cap

On Mon, 03 Aug 2020, Christian Ehrhardt wrote: > From: Stefan Bader > > On some architectures (ppc, s390x, sparc, arm) qemu will read auxv > to detect hardware capabilities via qemu_getauxval. > > Allow that access read-only for the entry owned by the current > qemu process. > > Signed-off-by:

[PATCH 5/8] apparmor: qemu access to @{PROC}/*/auxv for hw_cap

From: Stefan Bader On some architectures (ppc, s390x, sparc, arm) qemu will read auxv to detect hardware capabilities via qemu_getauxval. Allow that access read-only for the entry owned by the current qemu process. Signed-off-by: Christian Ehrhardt Signed-off-by: Stefan Bader --- src/securit