16 Dec
2017
16 Dec
'17
3:39 p.m.
Hi, Jamie Strandboge:
These rules are unfortunate, but it is important to note that this is in the libvirtd profile, not the guest profiles. As mentioned in the contextual diff, the profile is intentionally very lenient since libvirtd is necessarily highly trusted. As Christian mentioned, we discussed that this is the best option for the moment. +1 to apply. Thanks for the patch!
Same here, these rules are much less problematic than they look like at first glance ⇒ +1 Cheers, -- intrigeri