Re: [PATCH] security: apparmor: Allow QEMU read /proc/sys/vm/max_map_count

20 Aug 2024


      On Tue, Aug 20, 2024 at 12:16:20 +0200, Michal Privoznik wrote:
...
In its commit v9.0.0-rc0~1^2 QEMU started to read
/proc/sys/vm/max_map_count file to set up coroutine limits better
(something about VMAs, mmap(), see the commit for more info).
Allow the file in apparmor profile.
Resolves: https://gitlab.com/libvirt/libvirt/-/issues/660
Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
---
 src/security/apparmor/libvirt-qemu.in | 1 +
 1 file changed, 1 insertion(+)
Reviewed-by: Peter Krempa <pkrempa@redhat.com>