From: Christian Ehrhardt <christian.ehrhardt@canonical.com>
Date: Fri, 3 Nov 2017 08:46:59 +0000 (+0100)
Subject: apparmor, virt-aa-helper: allow ipv6
X-Git-Url: http://xenbits.xensource.com/gitweb?a=commitdiff_plain;h=b4470515f6e5f9c68fd8b07969ecaa6da0db2066;p=libvirt.git

apparmor, virt-aa-helper: allow ipv6

In case ipv6 is used the network inet6 permission is required for
virt-aa-helper.

Signed-off-by: Christian Ehrhardt <christian.ehrhardt@canonical.com>
---

diff --git a/examples/apparmor/usr.lib.libvirt.virt-aa-helper b/examples/apparmor/usr.lib.libvirt.virt-aa-helper
index 012080c676..bd6181d009 100644
--- a/examples/apparmor/usr.lib.libvirt.virt-aa-helper
+++ b/examples/apparmor/usr.lib.libvirt.virt-aa-helper
@@ -10,6 +10,7 @@ profile virt-aa-helper /usr/{lib,lib64}/libvirt/virt-aa-helper {
 
   # needed for when disk is on a network filesystem
   network inet,
+  network inet6,
 
   deny @{PROC}/[0-9]*/mounts r,
   @{PROC}/[0-9]*/net/psched r,