Re: [libvirt] [PATCH 1/2] apparmor: allow qemu to read max_segments

2017-11-06 Thread Jamie Strandboge
On Fri, 2017-11-03 at 09:46 +0100, Christian Ehrhardt wrote: > Since qemu 2.9 via 9103f1ce "file-posix: Consider max_segments for > BlockLimits.max_transfer" this is a new access that is denied by the > qemu profile. > > It is non fatal, but prevents the fix mentioned to actually work. > It should

[libvirt] [PATCH 1/2] apparmor: allow qemu to read max_segments

2017-11-03 Thread Christian Ehrhardt
Since qemu 2.9 via 9103f1ce "file-posix: Consider max_segments for BlockLimits.max_transfer" this is a new access that is denied by the qemu profile. It is non fatal, but prevents the fix mentioned to actually work. It should be safe to allow reading from that path. Since qemu opens a symlink pat