Was this patch tested? I initially tried to use virFileResolveLink()
but
could not. This was discussed in "[libvirt] [PATCH 0/4] AppArmor
updates" from 11/12/2009:
"Implements all changes requested by DV except for getting rid of
readlink(). I can't use virFileResolveLink() because it lstat()s the
file and uses st.st_size to create a buffer. Unfortunately, running
lstat() on /proc/self/exe results in st.st_size to be 0."
Unless virFileResolveLink() was changed, this patch will break AppArmor.
Jamie
--
Jamie Strandboge |
http://www.canonical.com