From: Cédric Bosdonnat <cbosdonnat@suse.com>
Date: Thu, 20 Nov 2014 10:32:38 +0000 (+0100)
Subject: virt-aa-helper: /etc/libvirt-sandbox/services isn't restricted
X-Git-Url: http://xenbits.xensource.com/gitweb?a=commitdiff_plain;h=c264eeaa381a917f01ba74526bf202073358a9dc;p=libvirt.git

virt-aa-helper: /etc/libvirt-sandbox/services isn't restricted

To get virt-sandbox-service working with AppArmor, virt-aa-helper
needs not to choke on path in /etc/libvirt-sandbox/services.
---

diff --git a/src/security/virt-aa-helper.c b/src/security/virt-aa-helper.c
index 81f9f40631..f273e09dac 100644
--- a/src/security/virt-aa-helper.c
+++ b/src/security/virt-aa-helper.c
@@ -571,7 +571,8 @@ valid_path(const char *path, const bool readonly)
     };
     /* override the above with these */
     const char * const override[] = {
-        "/sys/devices/pci"	/* for hostdev pci devices */
+        "/sys/devices/pci",	/* for hostdev pci devices */
+        "/etc/libvirt-sandbox/services/" /* for virt-sandbox service config */
     };
 
     if (path == NULL) {