Comment 2 for bug 646706

Revision history for this message
Soren Hansen (soren) wrote : Re: [Bug 646706] Re: NWFilter support broken due to Apparmour restrictions

On 24-09-2010 13:37, Jamie Strandboge wrote:
> I'm not opposed to changing /etc/apparmor.d/usr.sbin.libvirtd at all
> since that profile is intended to be very lenient and is there primarily
> so we can aa_change_profile() and deny a couple of things. However,
> 'network socket dgram,' is not valid apparmor syntax (see 'man
> apparmor.d' for details).
>

Err, I meant "network packet dgram", of course. My bad.

--
Soren Hansen
Ubuntu Developer http://www.ubuntu.com/
OpenStack Developer http://www.openstack.org/