We could consider adding that to libvirt's profile directly.
Or to add it to `abstractions/nameservice` as it is nss means that trigger this.
Is that really the right place?
In the latter case I'd still need a libvirt SRU as it didn't need and include abstractions/nameservice up to now.
@Seth what would you think of this proposal:
A)
1. "unix (bind) type=dgram addr=@userdb-*," to /etc/apparmor.d/abstractions/nameservice (package: apparmor)
2. add abstractions/nameservice to /etc/apparmor.d/usr.sbin.libvirtd (package: libvirt)
or
B)
1. "unix (bind) type=dgram addr=@userdb-*," to /etc/apparmor.d/usr.sbin.libvirtd (package: libvirt)
We could consider adding that to libvirt's profile directly. nameservice` as it is nss means that trigger this.
Or to add it to `abstractions/
Is that really the right place?
In the latter case I'd still need a libvirt SRU as it didn't need and include abstractions/ nameservice up to now.
@Seth what would you think of this proposal: d/abstractions/ nameservice (package: apparmor) nameservice to /etc/apparmor. d/usr.sbin. libvirtd (package: libvirt)
A)
1. "unix (bind) type=dgram addr=@userdb-*," to /etc/apparmor.
2. add abstractions/
or
B) d/usr.sbin. libvirtd (package: libvirt)
1. "unix (bind) type=dgram addr=@userdb-*," to /etc/apparmor.