Commit 711f612381bd4120630025dfc669b585109fbc16 - libvirt

apparmor: Allow run pygrup Tobias Wolter authored 4 years ago Guido Günther committed 4 years ago

2 changed file(s) with 21 addition(s) and 0 deletion(s). Raw diff Collapse all Expand all

+20

-0

debian/patches/apparmor-Allow-run-pygrup.patch less more

	0	From: Tobias Wolter <towo@b1-systems.de>
	1	Date: Wed, 21 Aug 2019 10:27:05 +0200
	2	Subject: apparmor: Allow run pygrup
	3
	4	---
	5	src/security/apparmor/usr.sbin.libvirtd \| 1 +
	6	1 file changed, 1 insertion(+)
	7
	8	diff --git a/src/security/apparmor/usr.sbin.libvirtd b/src/security/apparmor/usr.sbin.libvirtd
	9	index c7c52c6..477788e 100644
	10	--- a/src/security/apparmor/usr.sbin.libvirtd
	11	+++ b/src/security/apparmor/usr.sbin.libvirtd
	12	@@ -85,6 +85,7 @@
	13	/usr/{lib,lib64}/xen-common/bin/xen-toolstack PUx,
	14	/usr/{lib,lib64}/xen/bin/* Ux,
	15	/usr/lib/xen-*/bin/libxl-save-helper PUx,
	16	+ /usr/lib/xen-*/bin/pygrub PUx,
	17
	18	# Required by nwfilter_ebiptables_driver.c:ebiptablesWriteToTempFile() to
	19	# read and run an ebtables script.

-0

debian/patches/series less more

33	33	security/api-disallow-virConnectGetDomainCapabilities-on-read-only.patch
34	34	security/api-disallow-virConnect-HypervisorCPU-on-read-only-connec.patch
35	35	Include-etc-pki-qemu-in-apparmor.patch
	36	apparmor-Allow-run-pygrup.patch