Codebase list libvirt / 2f59533
Use dh-apparmor This makes sure we load the profiles after installing the package Closes: #792426 Felix Geyer authored 8 years ago Guido Günther committed 8 years ago
4 changed file(s) with 37 addition(s) and 0 deletion(s). Raw diff Collapse all Expand all
77 debhelper (>= 7),
88 dh-autoreconf,
99 dh-systemd (>= 1.18~),
10 dh-apparmor [linux-any],
1011 libxml2-dev,
1112 libncurses5-dev,
1213 libreadline-dev,
0 From: Felix Geyer <fgeyer@debian.org>
1 Date: Tue, 11 Aug 2015 07:25:01 +0200
2 Subject: apparmor_profiles_local_include
3
4 Include local apparmor profile
5 ---
6 examples/apparmor/usr.lib.libvirt.virt-aa-helper | 3 +++
7 examples/apparmor/usr.sbin.libvirtd | 2 ++
8 2 files changed, 5 insertions(+)
9
10 diff --git a/examples/apparmor/usr.lib.libvirt.virt-aa-helper b/examples/apparmor/usr.lib.libvirt.virt-aa-helper
11 index 89b95f6..a992119 100644
12 --- a/examples/apparmor/usr.lib.libvirt.virt-aa-helper
13 +++ b/examples/apparmor/usr.lib.libvirt.virt-aa-helper
14 @@ -52,4 +52,7 @@ profile virt-aa-helper /usr/{lib,lib64}/libvirt/virt-aa-helper {
15 /**.vmdk r,
16 /**.[iI][sS][oO] r,
17 /**/disk{,.*} r,
18 +
19 + # Site-specific additions and overrides. See local/README for details.
20 + #include <local/usr.lib.libvirt.virt-aa-helper>
21 }
22 diff --git a/examples/apparmor/usr.sbin.libvirtd b/examples/apparmor/usr.sbin.libvirtd
23 index 5d606e6..be4e1ef 100644
24 --- a/examples/apparmor/usr.sbin.libvirtd
25 +++ b/examples/apparmor/usr.sbin.libvirtd
26 @@ -66,4 +66,6 @@
27 # allow changing to our UUID-based named profiles
28 change_profile -> @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*,
29
30 + # Site-specific additions and overrides. See local/README for details.
31 + #include <local/usr.sbin.libvirtd>
32 }
1111 debian/Debianize-virtlockd.patch
1212 Use-upstreams-polkit-rule.patch
1313 Allow-access-to-libnl-3-config-files.patch
14 debian/apparmor_profiles_local_include.patch
157157 dh_install -p libvirt-daemon-system usr/lib/systemd/system lib/systemd/
158158 dh_install -p libvirt-daemon-system usr/lib/libvirt/virt-aa-helper
159159 dh_install -p libvirt-daemon-system etc/apparmor.d
160 dh_apparmor -p libvirt-daemon-system --profile-name=usr.lib.libvirt.virt-aa-helper
161 dh_apparmor -p libvirt-daemon-system --profile-name=usr.sbin.libvirtd
160162 dh_install -p libvirt-daemon-system usr/share/polkit-1
161163 # Not all linux arches have systemtap yet
162164 mkdir -p debian/tmp/usr/share/systemtap