Patch1 is a small improvement. Patch2 fixes a bug that is triggered
when the apparmor security driver is enabled and domain config
specifies a different security driver. E.g.
# virsh dumpxml test | grep seclabel
<seclabel type='none' model='none'/>
# virsh start test
error: Failed to start domain test
error: An error occurred, but the cause is unknown
Jim Fehlig (2):
apparmor: don't overwrite error from reload_profile
apparmor: don't fail on non-apparmor <seclabel>
src/security/security_apparmor.c | 72 ++++++++++------------------------------
1 file changed, 18 insertions(+), 54 deletions(-)
--
2.9.2