Hi,
Christian Ehrhardt:
With that qemu change in place the rules generated for the image
and backing files need the allowance to also lock (k) the files.
I'm not a C developer so I cannot review the proposed patch, but FWIW
Christian's reasoning makes sense to me and from a high-level AppArmor
perspective, the proposed change seems entirely harmless.
Cheers,
--
intrigeri