Re: [libvirt] [PATCH] apparmor: add ptrace/mediation rules for unconfined guests
Hi,
Jamie Strandboge:
These rules are unfortunate, but it is important to note that this
is
in the libvirtd profile, not the guest profiles. As mentioned in the
contextual diff, the profile is intentionally very lenient since
libvirtd is necessarily highly trusted. As Christian mentioned, we
discussed that this is the best option for the moment. +1 to apply.
Thanks for the patch!
Same here, these rules are much less problematic than they look like
at first glance ⇒ +1
Cheers,
--
intrigeri