Hier die Unterschiede
Diff
erich@Linux-Desktop:~> diff -Naur /etc/apparmor.d/usr.lib.libvirt.virt-aa-helper /etc/apparmor.d/usr.lib.libvirt.virt-aa-helper.rpmnew
--- /etc/apparmor.d/usr.lib.libvirt.virt-aa-helper 2020-10-26 18:12:17.000000000 +0100
+++ /etc/apparmor.d/usr.lib.libvirt.virt-aa-helper.rpmnew 2023-07-26 10:18:24.000000000 +0200
@@ -1,8 +1,8 @@
-# Last Modified: Mon Apr 5 15:10:27 2010
#include <tunables/global>
-profile virt-aa-helper /usr/{lib,lib64}/libvirt/virt-aa-helper {
+profile virt-aa-helper /usr/lib64/libvirt/virt-aa-helper {
#include <abstractions/base>
+ #include <abstractions/openssl>
# needed for searching directories
capability dac_override,
@@ -17,7 +17,11 @@
owner @{PROC}/[0-9]*/status r,
@{PROC}/filesystems r,
- /etc/libnl*/classid r,
+ # Used when internally running another command (namely apparmor_parser)
+ @{PROC}/@{pid}/fd/ r,
+
+ # allow reading libnl's classid file
+ /etc/libnl{,-3}/classid r,
# for gl enabled graphics
/dev/dri/{,*} r,
@@ -36,7 +40,7 @@
deny /dev/mapper/ r,
deny /dev/mapper/* r,
- /usr/{lib,lib64}/libvirt/virt-aa-helper mr,
+ /usr/lib64/libvirt/virt-aa-helper mr,
/{usr/,}sbin/apparmor_parser Ux,
/etc/apparmor.d/libvirt/* r,
@@ -63,8 +67,9 @@
/**.qcow{,2} r,
/**.qed r,
/**.vmdk r,
+ /**.vhd r,
/**.[iI][sS][oO] r,
/**/disk{,.*} r,
- #include <local/usr.lib.libvirt.virt-aa-helper>
+ include if exists <local/usr.lib.libvirt.virt-aa-helper>
}
erich@Linux-Desktop:~> 
