[Pkg-libvirt-maintainers] Bug#786650: virt-aa-helper: incomplete apparmor profile

[intrigeri]

Felix Geyer wrote (20 Aug 2015 09:18:59 GMT) :
> The deny rules aren't strictly necessary but they silence those (harmless) denials.

Thanks for the clarification. I don't think that silencing harmless denials
qualifies for a stable pu.

> I'm not quite sure why virt-aa-helper opens the devices in the first place.
> We need to look into how to push this upstream.
> Through modifying the helper or the profile.

I've been pushing Stefan Bader to upstream Ubuntu's improvements to
the libvirt profiles for ~1 year. Patches were sent upstream, but
last time I checked the package FTBFS'ed once they were applies (some
autoconf issue IIRC).

Cheers,
-- 
intrigeri