]> xenbits.xensource.com Git - libvirt.git/commitdiff
apparmor, virt-aa-helper: allow ipv6
authorChristian Ehrhardt <christian.ehrhardt@canonical.com>
Fri, 3 Nov 2017 08:46:59 +0000 (09:46 +0100)
committerMichal Privoznik <mprivozn@redhat.com>
Tue, 7 Nov 2017 15:57:32 +0000 (16:57 +0100)
In case ipv6 is used the network inet6 permission is required for
virt-aa-helper.

Signed-off-by: Christian Ehrhardt <christian.ehrhardt@canonical.com>
examples/apparmor/usr.lib.libvirt.virt-aa-helper

index 012080c676f41318365a3280a9484fdbd53da34e..bd6181d009bb90595fe6268b61613b4051dcffda 100644 (file)
@@ -10,6 +10,7 @@ profile virt-aa-helper /usr/{lib,lib64}/libvirt/virt-aa-helper {
 
   # needed for when disk is on a network filesystem
   network inet,
+  network inet6,
 
   deny @{PROC}/[0-9]*/mounts r,
   @{PROC}/[0-9]*/net/psched r,