[libvirt] [PATCH] apparmor: allow reading cap_last_cap
Jamie Strandboge
jamie at canonical.com
Wed Sep 3 19:53:40 UTC 2014
On 09/03/2014 02:52 PM, Felix Geyer wrote:
> libcap-ng >= 0.7.4 fails when it can't read /sys/kernel/cap_last_cap
> and thus running a qemu guest fails.
>
> Allow reading cap_last_cap in the libvirt-qemu apparmor abstraction.
> ---
> examples/apparmor/libvirt-qemu | 1 +
> 1 file changed, 1 insertion(+)
>
> diff --git a/examples/apparmor/libvirt-qemu b/examples/apparmor/libvirt-qemu
> index 83814ec..1a98182 100644
> --- a/examples/apparmor/libvirt-qemu
> +++ b/examples/apparmor/libvirt-qemu
> @@ -21,6 +21,7 @@
> /dev/ptmx rw,
> /dev/kqemu rw,
> @{PROC}/*/status r,
> + @{PROC}/sys/kernel/cap_last_cap r,
>
> # For hostdev access. The actual devices will be added dynamically
> /sys/bus/usb/devices/ r,
>
ACK
--
Jamie Strandboge http://www.ubuntu.com/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://listman.redhat.com/archives/libvir-list/attachments/20140903/364c79f0/attachment-0001.sig>
More information about the libvir-list
mailing list