Re: [libvirt] [PATCH] Apparmor: Support Xen scripts in libexec
On 10/18/19 8:31 AM, Andrea Bolognani wrote:
On Thu, 2019-10-17 at 03:41 +0000, Jim Fehlig wrote:
> Upstream Xen has traditionally installed various hotplug and
> utility scripts in /etc/xen/scripts/. openSUSE is slowly moving
> all distribution provided configuration files and scripts from
> /etc to /usr. In the case of the Xen scripts provided under
> /etc/xen/scripts/, they will be moving to /usr/lib/xen/scripts/.
> Adjust the libvirtd Apparmor profile to allow executing scripts
> from this location.
>
> Signed-off-by: Jim Fehlig <jfehlig(a)suse.com>
> ---
>
> If this is deemed too distro-specific I'm happy to maintain a
> downstream patch.
>
> src/security/apparmor/usr.sbin.libvirtd | 1 +
> 1 file changed, 1 insertion(+)
I'm no AppArmor expert but this looks sane enough to me, so
Reviewed-by: Andrea Bolognani <abologna(a)redhat.com>
Thanks, but I think I should hold off pushing this until other distros make a
similar change to the Xen scripts location. We are still debating on when to
make the change in openSUSE :-). Sorry, I pulled the trigger a bit to early on
this one.
Regards,
Jim