Re: [libvirt] [PATCH v2] Fix apparmor profile to make vfio pci passthrough work

2014-03-27 Thread Eric Blake
On 03/25/2014 03:27 PM, Serge Hallyn wrote: Quoting Cedric Bosdonnat (cbosdon...@suse.com): On Tue, 2014-03-25 at 10:40 -0500, Serge Hallyn wrote: Quoting Cédric Bosdonnat (cbosdon...@suse.com): See lp#1276719 for the bug description. As virt-aa-helper doesn't know the VFIO groups to use for

Re: [libvirt] [PATCH v2] Fix apparmor profile to make vfio pci passthrough work

2014-03-25 Thread Serge Hallyn
Quoting Cédric Bosdonnat (cbosdon...@suse.com): See lp#1276719 for the bug description. As virt-aa-helper doesn't know the VFIO groups to use for the guest, allow access to all /dev/vfio/[0-9]* and /dev/vfio/vfio files if there is a potential need for vfio --- Thanks, Cédric! Looks good to

Re: [libvirt] [PATCH v2] Fix apparmor profile to make vfio pci passthrough work

2014-03-25 Thread Cedric Bosdonnat
On Tue, 2014-03-25 at 10:40 -0500, Serge Hallyn wrote: Quoting Cédric Bosdonnat (cbosdon...@suse.com): See lp#1276719 for the bug description. As virt-aa-helper doesn't know the VFIO groups to use for the guest, allow access to all /dev/vfio/[0-9]* and /dev/vfio/vfio files if there is a

Re: [libvirt] [PATCH v2] Fix apparmor profile to make vfio pci passthrough work

2014-03-25 Thread Serge Hallyn
Quoting Cedric Bosdonnat (cbosdon...@suse.com): On Tue, 2014-03-25 at 10:40 -0500, Serge Hallyn wrote: Quoting Cédric Bosdonnat (cbosdon...@suse.com): See lp#1276719 for the bug description. As virt-aa-helper doesn't know the VFIO groups to use for the guest, allow access to all