From 9b0788554b9c7df8d114ec4bd2e2008adeac34f8 Mon Sep 17 00:00:00 2001 From: Christian Boltz Date: Sun, 6 Sep 2020 18:06:33 +0000 Subject: [PATCH] Merge branch 'cboltz-2.13-dnsmasq' into 'apparmor-2.13' [2.12+2.13] dnsmasq: Backport support for /usr/libexec/libvirt_leaseshelper path References: https://build.opensuse.org/request/show/831960 See merge request apparmor/apparmor!618 Acked-by: John Johansen for 2.12 and 2.13 (cherry picked from commit e32cbfc0e66643a143af149086ee3241cf078910) af6bf823 Invalid path to libvirt_leaseshelper in usr.sbin.dnsmasq f2e09aa2 policy: invalid path to libvirt_leaseshelper in usr.sbin.dnsmasq --- profiles/apparmor.d/usr.sbin.dnsmasq | 2 ++ 1 file changed, 2 insertions(+) diff --git a/profiles/apparmor.d/usr.sbin.dnsmasq b/profiles/apparmor.d/usr.sbin.dnsmasq index f2b5ca18b..dda3e76a4 100644 --- a/profiles/apparmor.d/usr.sbin.dnsmasq +++ b/profiles/apparmor.d/usr.sbin.dnsmasq @@ -89,6 +89,7 @@ profile /usr/sbin/dnsmasq /usr/{bin,sbin}/dnsmasq flags=(attach_disconnected) { # libvirt lease helper /usr/lib{,64}/libvirt/libvirt_leaseshelper Cx -> libvirt_leaseshelper, + /usr/libexec/libvirt_leaseshelper Cx -> libvirt_leaseshelper, # lxc-net pid and lease files /{,var/}run/lxc/dnsmasq.pid rw, @@ -116,6 +117,7 @@ profile /usr/sbin/dnsmasq /usr/{bin,sbin}/dnsmasq flags=(attach_disconnected) { /etc/libnl-3/classid r, /usr/lib{,64}/libvirt/libvirt_leaseshelper m, + /usr/libexec/libvirt_leaseshelper m, owner @{PROC}/@{pid}/net/psched r, owner @{PROC}/@{pid}/status r,