[libvirt] [PATCH 06/12] apparmor, libvirt-qemu: Allow access to hugepage mounts

Christian Ehrhardt christian.ehrhardt at canonical.com
Tue Dec 19 15:03:39 UTC 2017


From: Serge Hallyn <serge.hallyn at ubuntu.com>

Allows owner access to hugepage mounts (both, the old and
new systemd variant).

Bug-Ubuntu: https://bugs.launchpad.net/bugs/1250216
Bug-Ubuntu: https://bugs.launchpad.net/bugs/1524737

Signed-off-by: Stefan Bader <stefan.bader at canonical.com>
---
 examples/apparmor/libvirt-qemu | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/examples/apparmor/libvirt-qemu b/examples/apparmor/libvirt-qemu
index 912b4ac..bb30530 100644
--- a/examples/apparmor/libvirt-qemu
+++ b/examples/apparmor/libvirt-qemu
@@ -184,6 +184,10 @@
   /sys/bus/ r,
   /sys/class/ r,
 
+  # for access to hugepages (LP: #1250216 and LP: #1524737)
+  owner "/run/hugepages/kvm/libvirt/qemu/**" rw,
+  owner "/dev/hugepages/libvirt/qemu/**" rw,
+
   # for rbd
   /etc/ceph/ceph.conf r,
 
-- 
2.7.4




More information about the libvir-list mailing list