Comment 44 for bug 1890858

Revision history for this message
Christian Ehrhardt  (paelzer) wrote :

We could consider adding that to libvirt's profile directly.
Or to add it to `abstractions/nameservice` as it is nss means that trigger this.
Is that really the right place?

In the latter case I'd still need a libvirt SRU as it didn't need and include abstractions/nameservice up to now.

@Seth what would you think of this proposal:
A)
1. "unix (bind) type=dgram addr=@userdb-*," to /etc/apparmor.d/abstractions/nameservice (package: apparmor)
2. add abstractions/nameservice to /etc/apparmor.d/usr.sbin.libvirtd (package: libvirt)

or

B)
1. "unix (bind) type=dgram addr=@userdb-*," to /etc/apparmor.d/usr.sbin.libvirtd (package: libvirt)