[Pkg-libvirt-maintainers] Bug#905339: Some open operations are DENIED by AppArmor

[intrigeri]

Control: tag -1 + moreinfo

Hi,

Haruki TSURUMOTO:

> I had enabled AppArmor on my debian stretch machine.
> I found some libvirt's open operations are DENIED by apparmor.

Indeed, the AppArmor policy for libvirt has been improved a lot since
Stretch, where it's far from being perfect.

> Would you apply this patch for stretch?

(I'm not the libvirt maintainer but I work on AppArmor in Debian.)

I would happily work on backports for Stretch of fixes to user-visible
issues in the AppArmor policy. I probably won't have time to work on
fixes to issues that have no perceivable user impact apart of noise in
the logs. Could you please extract from your proposed patch the subset
that fits into the first category?

Cheers,
-- 
intrigeri