
11 Aug
2017
11 Aug
'17
8:58 p.m.
Hi, Christian Ehrhardt:
With that qemu change in place the rules generated for the image and backing files need the allowance to also lock (k) the files.
I'm not a C developer so I cannot review the proposed patch, but FWIW Christian's reasoning makes sense to me and from a high-level AppArmor perspective, the proposed change seems entirely harmless. Cheers, -- intrigeri