Newer version of libvirt have a lease helper. Update dnsmasq policy for this.

Acked-By: Jamie Strandboge <[email protected]>

-- 
Jamie Strandboge                 http://www.ubuntu.com/
Author: Jamie Strandboge <[email protected]>
Description: update dnsmasq policy for new libvirt lease helper

Index: apparmor-2.8.96~2541/profiles/apparmor.d/usr.sbin.dnsmasq
===================================================================
--- apparmor-2.8.96~2541.orig/profiles/apparmor.d/usr.sbin.dnsmasq
+++ apparmor-2.8.96~2541/profiles/apparmor.d/usr.sbin.dnsmasq
@@ -49,14 +49,19 @@
   @{TFTP_DIR}/** r,
 
   # libvirt config, lease and hosts files for dnsmasq
-  /var/lib/libvirt/dnsmasq/            r,
-  /var/lib/libvirt/dnsmasq/*        r,
-  /var/lib/libvirt/dnsmasq/*.leases rw,
+  /var/lib/libvirt/dnsmasq/          r,
+  /var/lib/libvirt/dnsmasq/*         r,
+  /var/lib/libvirt/dnsmasq/*.leases  rw,
+  /var/lib/libvirt/dnsmasq/*.status* rw,
 
   # libvirt pid files for dnsmasq
   /{,var/}run/libvirt/network/      r,
   /{,var/}run/libvirt/network/*.pid rw,
 
+  # libvirt lease helper
+  /usr/lib/libvirt/libvirt_leaseshelper ix,
+  /{,var/}run/leaseshelper.pid rwk,
+
   # NetworkManager integration
   /{,var/}run/nm-dns-dnsmasq.conf r,
   /{,var/}run/sendsigs.omit.d/*dnsmasq.pid w,

Attachment: signature.asc
Description: OpenPGP digital signature

-- 
AppArmor mailing list
[email protected]
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/apparmor

Reply via email to