Re: [PATCH 0/1] virt-aa-helper: allow hard links for mounts

On Thu, Oct 22, 2020 at 05:10:10PM +0200, Christian Schoenebeck wrote:

I'm suggesting to add the AppArmor permission "l" on libvirt export pathes to allow guests creating hard links, which is currently a problem for 9pfs mounts.

Since the suggested patch would affect virtiofs as well, I would ask David and Stefan for feedback. If necessary I would change the patch to exclude virtiofs from this change.

virtiofsd supports the link(2) operation and enabling it seems reasonable to me. It is enabled in non-AppArmor configuration. Stefan