summaryrefslogtreecommitdiff
path: root/examples
diff options
context:
space:
mode:
authorCédric Bosdonnat <cbosdonnat@suse.com>2015-03-11 11:09:40 +0100
committerCédric Bosdonnat <cbosdonnat@suse.com>2015-04-09 11:18:16 +0200
commit9e7b1e646d301dc6e0ebf89e5fccd46b57bc9e15 (patch)
tree28cafb1aa9c531888466f51e5ca2545fd3b953e4 /examples
parentda33a1ac1f6c0ae2ebe72bc385bbc7c407026956 (diff)
downloadlibvirt-9e7b1e646d301dc6e0ebf89e5fccd46b57bc9e15.tar.gz
Apparmor qemu abstraction fixes for SLES
SLES 11 has legacy qemu-kvm package, /usr/bin/qemu-kvm and /usr/share/qemu-kvm need to be accessed to domains.
Diffstat (limited to 'examples')
-rw-r--r--examples/apparmor/libvirt-qemu9
1 files changed, 9 insertions, 0 deletions
diff --git a/examples/apparmor/libvirt-qemu b/examples/apparmor/libvirt-qemu
index 7aad3911a2..a3043dd9bf 100644
--- a/examples/apparmor/libvirt-qemu
+++ b/examples/apparmor/libvirt-qemu
@@ -59,6 +59,7 @@
# access to firmware's etc
/usr/share/kvm/** r,
/usr/share/qemu/** r,
+ /usr/share/qemu-kvm/** r,
/usr/share/bochs/** r,
/usr/share/openbios/** r,
/usr/share/openhackware/** r,
@@ -73,6 +74,7 @@
# the various binaries
/usr/bin/kvm rmix,
/usr/bin/qemu rmix,
+ /usr/bin/qemu-kvm rmix,
/usr/bin/qemu-system-arm rmix,
/usr/bin/qemu-system-cris rmix,
/usr/bin/qemu-system-i386 rmix,
@@ -118,12 +120,19 @@
/bin/dd rmix,
/bin/cat rmix,
+ # for restore
+ /bin/bash rmix,
+
# for usb access
/dev/bus/usb/ r,
/etc/udev/udev.conf r,
/sys/bus/ r,
/sys/class/ r,
+ # nscd pieces
+ /run/nscd/group r,
+ /run/nscd/passwd r,
+
/usr/{lib,libexec}/qemu-bridge-helper Cx -> qemu_bridge_helper,
# child profile for bridge helper process
profile qemu_bridge_helper {