Re: [libvirt] [PATCH 08/10] apparmor, libvirt-qemu: Allow macvtap access

2017-06-07 Thread Christian Ehrhardt
On Fri, Jun 2, 2017 at 12:55 PM, Guido Günther wrote: > Shouldn't this only be added when macvtap is in use? > Cheers, > -- Guido > Right again - as the ceph change this is part of a category of rules where in a perfect world we would write virt-aa-helper code for each of them. In this particu

Re: [libvirt] [PATCH 08/10] apparmor, libvirt-qemu: Allow macvtap access

2017-06-02 Thread Guido Günther
On Tue, May 23, 2017 at 06:22:46PM +0200, Stefan Bader wrote: > From: Guilhem Lettron > > Add rule to allow access to /dev/tap* used by macvtap. > > Bug-Ubuntu: https://bugs.launchpad.net/bugs/921870 > > Signed-off-by: Christian Ehrhardt > Signed-off-by: Stefan Bader > --- > examples/apparmo