From: Guido Günther <agx@sigxcpu.org>
Date: Fri, 17 Mar 2017 08:59:42 +0000 (+0100)
Subject: apparmor: allow /usr/lib/qemu/qemu-bridge-helper
X-Git-Url: http://xenbits.xensource.com/gitweb?a=commitdiff_plain;h=123cc3e11c03442fd87f00a9089882ec65cffdb8;p=libvirt.git

apparmor: allow /usr/lib/qemu/qemu-bridge-helper

This is where e.g. Debian puts it.
---

diff --git a/examples/apparmor/usr.sbin.libvirtd b/examples/apparmor/usr.sbin.libvirtd
index 8893e75fe9..353b039acc 100644
--- a/examples/apparmor/usr.sbin.libvirtd
+++ b/examples/apparmor/usr.sbin.libvirtd
@@ -67,7 +67,7 @@
   # allow changing to our UUID-based named profiles
   change_profile -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*,
 
-  /usr/{lib,libexec}/qemu-bridge-helper Cx -> qemu_bridge_helper,
+  /usr/{lib,lib64,lib/qemu,libexec}/qemu-bridge-helper Cx -> qemu_bridge_helper,
   # child profile for bridge helper process
   profile qemu_bridge_helper {
    #include <abstractions/base>
@@ -83,6 +83,6 @@
    /etc/qemu/** r,
    owner @{PROC}/*/status r,
 
-   /usr/{lib,libexec}/qemu-bridge-helper rmix,
+   /usr/{lib,lib64,lib/qemu,libexec}/qemu-bridge-helper rmix,
   }
 }