On Thu, May 24, 2018 at 04:26:09PM -0400, Stefan Berger wrote:
This patch extends the AppArmor domain profile with file paths
the swtpm accesses for state, log, pid, and socket files.
Both, QEMU and swtpm, use this AppArmor profile.
Signed-off-by: Stefan Berger <stefanb(a)linux.vnet.ibm.com>
Cc: Christian Ehrhardt <christian.ehrhardt(a)canonical.com>
---
examples/apparmor/libvirt-qemu | 3 +++
src/security/virt-aa-helper.c | 24 ++++++++++++++++++++++++
2 files changed, 27 insertions(+)
Reviewed-by: Ján Tomko <jtomko(a)redhat.com>
Jano