From: Mike Latimer <mlatimer@suse.com>
Date: Tue, 20 Jan 2015 01:25:42 +0000 (-0700)
Subject: Fix apparmor issues for tck
X-Git-Url: http://xenbits.xensource.com/gitweb?a=commitdiff_plain;h=c0273cd6f28bebb1e9fc2b9f2ec0fd789aeffd33;p=libvirt.git

Fix apparmor issues for tck

The network and nwfilter tests contained in the libvirt-TCK testkit can fail
unless access to raw network packets is granted. Without this access, the
following apparmor error can be seen while running the tests:

  apparmor="DENIED" operation="create" parent=1 profile="/usr/sbin/libvirtd"
  pid=94731 comm="libvirtd" family="packet" sock_type="raw" protocol=768
---

diff --git a/examples/apparmor/usr.sbin.libvirtd b/examples/apparmor/usr.sbin.libvirtd
index 99178366e9..4a94fff436 100644
--- a/examples/apparmor/usr.sbin.libvirtd
+++ b/examples/apparmor/usr.sbin.libvirtd
@@ -35,6 +35,7 @@
   network inet6 stream,
   network inet6 dgram,
   network packet dgram,
+  network packet raw,
 
   # Very lenient profile for libvirtd since we want to first focus on confining
   # the guests. Guests will have a very restricted profile.