This is a repost of the previous patch series, with the following changes:
* Dropped the patch setting "none" security driver as default in lxc.conf
* Add a patch to implement support for "none" type with apparmor security
model.
Cédric Bosdonnat (5):
LXC driver: generate apparmor profiles for guests
Make sure apparmor is started before libvirtd
apparmor: add debug traces when changing profile.
add support for apparmor in lxc-enter-namespace
apparmor: handle "none" type
daemon/libvirtd.service.in | 1 +
examples/apparmor/Makefile.am | 2 ++
examples/apparmor/TEMPLATE | 2 +-
examples/apparmor/libvirt-lxc | 17 ++++++++++
src/libvirt-lxc.c | 13 ++++++++
src/security/security_apparmor.c | 24 +++++++++++---
src/security/virt-aa-helper.c | 69 +++++++++++++++++++++++++++++-----------
7 files changed, 103 insertions(+), 25 deletions(-)
create mode 100644 examples/apparmor/libvirt-lxc
--
1.8.5.2