Re: [libvirt] [PATCH 2/3] Grant access to helpers
On Thursday, January 22, 2015 08:55:07 AM Cedric Bosdonnat wrote:
> Seems like the apparmor profile for libvirtd is pretty wide
open, so I'm
> not sure if there will be much of a difference between those two
> settings. I'm also not sure how best to test the functionality of those
> helpers to find out...
Jim Fehlig and I just tested this and were able to show that 'ix' is sufficient
for the helpers to work properly. Thanks for pointing this out Cedric. Can you
just change the patch when you commit?
Jamie, as apparmor expert, do you have any opinion on this?
Still would be great to hear Jamie's opinion on this.
-Mike