[libvirt] [PATCH] virt-aa-helper: grant locking permission on -f

2017-10-24 Thread Christian Ehrhardt
Hot-adding disks does not parse the full XML to generate apparmor rules. Instead it uses -f to append a generic rule for that file path. 580cdaa7: "virt-aa-helper: locking disk files for qemu 2.10" implemented the qemu 2.10 requirement to allow locking on disks images that are part of the domain

Re: [libvirt] [PATCH] virt-aa-helper: grant locking permission on -f

2017-10-25 Thread Jamie Strandboge
On Tue, 2017-10-24 at 16:54 +0200, Christian Ehrhardt wrote: > Hot-adding disks does not parse the full XML to generate apparmor > rules. > Instead it uses -f to append a generic rule for that file > path. > > 580cdaa7: "virt-aa-helper: locking disk files for qemu 2.10" > implemented > the qemu 2

Re: [libvirt] [PATCH] virt-aa-helper: grant locking permission on -f

2017-10-26 Thread Michal Privoznik
On 10/24/2017 04:54 PM, Christian Ehrhardt wrote: > Hot-adding disks does not parse the full XML to generate apparmor rules. > Instead it uses -f to append a generic rule for that file path. > > 580cdaa7: "virt-aa-helper: locking disk files for qemu 2.10" implemented > the qemu 2.10 requirement t