diff options
author | Cédric Bosdonnat <cbosdonnat@suse.com> | 2015-03-11 11:09:40 +0100 |
---|---|---|
committer | Cédric Bosdonnat <cbosdonnat@suse.com> | 2015-04-09 11:18:16 +0200 |
commit | 9e7b1e646d301dc6e0ebf89e5fccd46b57bc9e15 (patch) | |
tree | 28cafb1aa9c531888466f51e5ca2545fd3b953e4 /examples | |
parent | da33a1ac1f6c0ae2ebe72bc385bbc7c407026956 (diff) | |
download | libvirt-9e7b1e646d301dc6e0ebf89e5fccd46b57bc9e15.tar.gz |
Apparmor qemu abstraction fixes for SLES
SLES 11 has legacy qemu-kvm package, /usr/bin/qemu-kvm and
/usr/share/qemu-kvm need to be accessed to domains.
Diffstat (limited to 'examples')
-rw-r--r-- | examples/apparmor/libvirt-qemu | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/examples/apparmor/libvirt-qemu b/examples/apparmor/libvirt-qemu index 7aad3911a2..a3043dd9bf 100644 --- a/examples/apparmor/libvirt-qemu +++ b/examples/apparmor/libvirt-qemu @@ -59,6 +59,7 @@ # access to firmware's etc /usr/share/kvm/** r, /usr/share/qemu/** r, + /usr/share/qemu-kvm/** r, /usr/share/bochs/** r, /usr/share/openbios/** r, /usr/share/openhackware/** r, @@ -73,6 +74,7 @@ # the various binaries /usr/bin/kvm rmix, /usr/bin/qemu rmix, + /usr/bin/qemu-kvm rmix, /usr/bin/qemu-system-arm rmix, /usr/bin/qemu-system-cris rmix, /usr/bin/qemu-system-i386 rmix, @@ -118,12 +120,19 @@ /bin/dd rmix, /bin/cat rmix, + # for restore + /bin/bash rmix, + # for usb access /dev/bus/usb/ r, /etc/udev/udev.conf r, /sys/bus/ r, /sys/class/ r, + # nscd pieces + /run/nscd/group r, + /run/nscd/passwd r, + /usr/{lib,libexec}/qemu-bridge-helper Cx -> qemu_bridge_helper, # child profile for bridge helper process profile qemu_bridge_helper { |