Re: [libvirt] [PATCH] apparmor: allow reading cap_last_cap

On 09/03/2014 02:52 PM, Felix Geyer wrote: > libcap-ng >= 0.7.4 fails when it can't read /sys/kernel/cap_last_cap > and thus running a qemu guest fails. > > Allow reading cap_last_cap in the libvirt-qemu apparmor abstraction. > --- > examples/apparmor/libvirt-qemu | 1 + > 1 file changed, 1 insertion(+) > > diff --git a/examples/apparmor/libvirt-qemu b/examples/apparmor/libvirt-qemu > index 83814ec..1a98182 100644 > --- a/examples/apparmor/libvirt-qemu > +++ b/examples/apparmor/libvirt-qemu > @@ -21,6 +21,7 @@ > /dev/ptmx rw, > /dev/kqemu rw, > @{PROC}/*/status r, > + @{PROC}/sys/kernel/cap_last_cap r, > > # For hostdev access. The actual devices will be added dynamically > /sys/bus/usb/devices/ r, > ACK