From: Cédric Bosdonnat <cbosdonnat@suse.com>
Date: Tue, 2 Jan 2018 08:54:46 +0000 (+0100)
Subject: apparmor: fix virt-aa-helper profile
X-Git-Url: http://xenbits.xensource.com/gitweb?a=commitdiff_plain;h=259a2cc34e0b006be3ba8489d2e26b69cd3361a8;p=libvirt.git

apparmor: fix virt-aa-helper profile

Fix rule introduced by commit 0f33025a:
  * to handle /var/run not being a symlink to /run
  * to be properly parsed: missing comma at the end.
---

diff --git a/examples/apparmor/usr.lib.libvirt.virt-aa-helper b/examples/apparmor/usr.lib.libvirt.virt-aa-helper
index 9c822b644e..105f09e43d 100644
--- a/examples/apparmor/usr.lib.libvirt.virt-aa-helper
+++ b/examples/apparmor/usr.lib.libvirt.virt-aa-helper
@@ -51,7 +51,7 @@ profile virt-aa-helper /usr/{lib,lib64}/libvirt/virt-aa-helper {
   /var/lib/libvirt/images/** r,
   /{media,mnt,opt,srv}/** r,
   # For virt-sandbox
-  /run/libvirt/**/[sv]d[a-z] r
+  /{,var/}run/libvirt/**/[sv]d[a-z] r,
 
   /**.img r,
   /**.raw r,