Re: [libvirt] [PATCH 2/2] Fix apparmor profile to make vfio pci passthrough work

2014-03-25 Thread Cedric Bosdonnat
Hello Serge, On Mon, 2014-03-24 at 22:21 -0500, Serge Hallyn wrote: Quoting Cédric Bosdonnat (cbosdon...@suse.com): See lp#1276719 for the bug description. As virt-aa-helper doesn't know Great, thanks for addressing this. the VFIO groups to use for the guest, Is there really no way

[libvirt] [PATCH 2/2] Fix apparmor profile to make vfio pci passthrough work

2014-03-24 Thread Cédric Bosdonnat
See lp#1276719 for the bug description. As virt-aa-helper doesn't know the VFIO groups to use for the guest, allow access to all /dev/vfio/[0-9]* and /dev/vfio/vfio files. --- examples/apparmor/libvirt-qemu | 5 + examples/apparmor/usr.sbin.libvirtd | 3 +++ 2 files changed, 8

Re: [libvirt] [PATCH 2/2] Fix apparmor profile to make vfio pci passthrough work

2014-03-24 Thread Serge Hallyn
Quoting Cédric Bosdonnat (cbosdon...@suse.com): See lp#1276719 for the bug description. As virt-aa-helper doesn't know Great, thanks for addressing this. the VFIO groups to use for the guest, Is there really no way for it to know that (based on xml)? If not then I guess this is the way to go