Control: tag -1 + moreinfo Hi,
Haruki TSURUMOTO: > I had enabled AppArmor on my debian stretch machine. > I found some libvirt's open operations are DENIED by apparmor. Indeed, the AppArmor policy for libvirt has been improved a lot since Stretch, where it's far from being perfect. > Would you apply this patch for stretch? (I'm not the libvirt maintainer but I work on AppArmor in Debian.) I would happily work on backports for Stretch of fixes to user-visible issues in the AppArmor policy. I probably won't have time to work on fixes to issues that have no perceivable user impact apart of noise in the logs. Could you please extract from your proposed patch the subset that fits into the first category? Cheers, -- intrigeri
