Re: [libvirt] [PATCH 3/4] apparmor: allow expected /tmp access patterns

2018-08-14 Thread Christian Ehrhardt
On Mon, Aug 13, 2018 at 7:08 PM Jamie Strandboge wrote: > On Mon, 2018-08-13 at 16:39 +0200, Christian Ehrhardt wrote: > > Several cases were found needing /tmp, for example ceph will try to > > list /tmp > > and the samba feature of qemu will place things in /tmp/qemu-smb.*. > > This is sort of

Re: [libvirt] [PATCH 3/4] apparmor: allow expected /tmp access patterns

2018-08-13 Thread Jamie Strandboge
On Mon, 2018-08-13 at 16:39 +0200, Christian Ehrhardt wrote: > Several cases were found needing /tmp, for example ceph will try to > list /tmp > and the samba feature of qemu will place things in /tmp/qemu-smb.*. > This is sort of safe because: > - While /tmp could contain anything it is not

[libvirt] [PATCH 3/4] apparmor: allow expected /tmp access patterns

2018-08-13 Thread Christian Ehrhardt
Several cases were found needing /tmp, for example ceph will try to list /tmp and the samba feature of qemu will place things in /tmp/qemu-smb.*. This is sort of safe because: - While /tmp could contain anything it is not recommended to put critical data there anyway - We restrict general