]> xenbits.xensource.com Git - libvirt.git/commit
apparmor: Add ptrace and signal rules for named profile
authorJim Fehlig <jfehlig@suse.com>
Fri, 1 Mar 2019 22:05:36 +0000 (15:05 -0700)
committerJim Fehlig <jfehlig@suse.com>
Wed, 6 Mar 2019 16:51:01 +0000 (09:51 -0700)
commit4ec3cf9a0fc3d76058ea363a6c35df19e67e6261
tree6fee0faae131c07f0571ab494aeef2a2bec1c2ce
parent3fd1a159680485dd545a7cb349d71b66031252a0
apparmor: Add ptrace and signal rules for named profile

Commit a3ab6d42 changed the libvirtd profile to a named profile
but neglected to accommodate the change in the qemu profile
ptrace and signal rules. As a result, libvirtd is unable to
signal confined qemu processes and hence unable to shutdown
or destroy VMs.

Add ptrace and signal rules that reference the libvirtd profile
by name in addition to full binary path.

Signed-off-by: Jim Fehlig <jfehlig@suse.com>
Acked-by: Jamie Strandboge <jamie@canonical.com>
src/security/apparmor/libvirt-qemu