These days, a lot of file reads from /sys and /proc is wrapped inside
ndctl rather than PMDK, so you'd need to review both.  And, a good part
of accesses happen only on true NVDIMMs -- although if I recall
correctly, those are all under /sys/bus/nd/devices.  There's also
/sys/devices, /sys/dev/char/%u:%u/*, /proc/self/*, etc.

I'm not sure what paths need to be listed in AppArmor, but grepping
through ndctl's and pmdk's sources would be a good start.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1871354

Title:
  apparmor denies related to nvdimms/nfit

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1871354/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to