diff --git a/apparmor.d/groups/virt/virtlogd b/apparmor.d/groups/virt/virtlogd new file mode 100644 index 000000000..af917ee07 --- /dev/null +++ b/apparmor.d/groups/virt/virtlogd @@ -0,0 +1,35 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2021 Alexandre Pujol +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}bin/virtlogd +profile virtlogd @{exec_path} { + include + include + include + + ptrace (read) peer=libvirtd, + ptrace (read) peer=unconfined, + + @{exec_path} mr, + + /etc/libvirt/virtlogd.conf r, + + /var/log/libvirt/qemu/*.log rw, + + @{run}/virtlogd.pid rwk, + + @{sys}/devices/system/node/ r, + @{sys}/devices/system/node/node[0-9]*/meminfo r, + + owner @{PROC}/@{pid}/stat r, + @{PROC}/1/environ r, + @{PROC}/cmdline r, + @{PROC}/sys/kernel/osrelease r, + + include if exists +} \ No newline at end of file