Re: [libvirt] [PATCH] security: AppArmor profile fixes for swtpm

2019-09-21 Thread Stefan Berger
On 9/16/19 9:27 AM, Chris Coulson wrote: The AppArmor profile generated by virt-aa-helper is too strict for swtpm. This change contains 2 small fixes: - Relax append access to swtpm's log file to permit write access instead. Append access is insufficient because the log is opened with O_CREAT. -

Re: [libvirt] [PATCH] security: AppArmor profile fixes for swtpm

2019-09-20 Thread Martin Kletzander
On Mon, Sep 16, 2019 at 03:27:25PM +0200, Chris Coulson wrote: The AppArmor profile generated by virt-aa-helper is too strict for swtpm. This change contains 2 small fixes: - Relax append access to swtpm's log file to permit write access instead. Append access is insufficient because the log is

Re: [libvirt] [PATCH] security: AppArmor profile fixes for swtpm

2019-09-16 Thread Jamie Strandboge
On Mon, 16 Sep 2019, Chris Coulson wrote: > The AppArmor profile generated by virt-aa-helper is too strict for swtpm. > This change contains 2 small fixes: > - Relax append access to swtpm's log file to permit write access instead. > Append access is insufficient because the log is opened with

[libvirt] [PATCH] security: AppArmor profile fixes for swtpm

2019-09-16 Thread Chris Coulson
The AppArmor profile generated by virt-aa-helper is too strict for swtpm. This change contains 2 small fixes: - Relax append access to swtpm's log file to permit write access instead. Append access is insufficient because the log is opened with O_CREAT. - Permit swtpm to acquire a lock on its lock