From 123cc3e11c03442fd87f00a9089882ec65cffdb8 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Guido=20G=C3=BCnther?= Date: Fri, 17 Mar 2017 09:59:42 +0100 Subject: [PATCH] apparmor: allow /usr/lib/qemu/qemu-bridge-helper This is where e.g. Debian puts it. --- examples/apparmor/usr.sbin.libvirtd | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/examples/apparmor/usr.sbin.libvirtd b/examples/apparmor/usr.sbin.libvirtd index 8893e75fe9..353b039acc 100644 --- a/examples/apparmor/usr.sbin.libvirtd +++ b/examples/apparmor/usr.sbin.libvirtd @@ -67,7 +67,7 @@ # allow changing to our UUID-based named profiles change_profile -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, - /usr/{lib,libexec}/qemu-bridge-helper Cx -> qemu_bridge_helper, + /usr/{lib,lib64,lib/qemu,libexec}/qemu-bridge-helper Cx -> qemu_bridge_helper, # child profile for bridge helper process profile qemu_bridge_helper { #include @@ -83,6 +83,6 @@ /etc/qemu/** r, owner @{PROC}/*/status r, - /usr/{lib,libexec}/qemu-bridge-helper rmix, + /usr/{lib,lib64,lib/qemu,libexec}/qemu-bridge-helper rmix, } } -- GitLab