Re: [libvirt] [PATCH] apparmor: add network netlink raw rule

2017-11-09 Thread Cedric Bosdonnat
On Thu, 2017-11-09 at 09:43 -0700, Jim Fehlig wrote: > On 11/09/2017 09:24 AM, Cédric Bosdonnat wrote: > > The rule 'network netlink raw' fixes these denials on libvirtd start: > > > > apparmor="DENIED" operation="create" profile="/usr/sbin/libvirtd" pid=12969 > > comm="libvirtd" family="netlink"

Re: [libvirt] [PATCH] apparmor: add network netlink raw rule

2017-11-09 Thread Jim Fehlig
On 11/09/2017 09:24 AM, Cédric Bosdonnat wrote: The rule 'network netlink raw' fixes these denials on libvirtd start: apparmor="DENIED" operation="create" profile="/usr/sbin/libvirtd" pid=12969 comm="libvirtd" family="netlink" sock_type="raw" protocol=0 requested_mask="create"

[libvirt] [PATCH] apparmor: add network netlink raw rule

2017-11-09 Thread Cédric Bosdonnat
The rule 'network netlink raw' fixes these denials on libvirtd start: apparmor="DENIED" operation="create" profile="/usr/sbin/libvirtd" pid=12969 comm="libvirtd" family="netlink" sock_type="raw" protocol=0 requested_mask="create" denied_mask="create" --- examples/apparmor/usr.sbin.libvirtd | 1 +