Re: [libvirt] [PATCH 1/1] lxc: allow fallback to no apparmor.

-----Original Message----- From: libvir-list-bounces(a)redhat.com [mailto:libvir-list-bounces@redhat.com] On Behalf Of Serge Hallyn Sent: Saturday, September 20, 2014 12:15 AM To: libvir-list(a)redhat.com Subject: [libvirt] [PATCH 1/1] lxc: allow fallback to no apparmor. The security_driver line in /etc/libvirt/qemu.conf is best-effort - if selinux is not available on the host, then 'none' will be used. The security_driver line in /etc/libvirt/lxc.conf doesn't behave the same way - if apparmor is specified but policies are not available on the host, then container creation fails. This patch always tries to fall back to 'none' if the requested driver is not available. A better patch would allow an option list like qemu.conf allows, but this patch doesn't do that. Signed-off-by: Serge Hallyn <serge.hallyn(a)ubuntu.com&gt; ---