saving uncommitted changes in /etc prior to apt run

diff --git a/.etckeeper b/.etckeeper
index fc38c8616e7a5739eda8b0740c2f185f63fb4464..4584c8f663efd14a7105f4a09248cb085b91dc65 100755 (executable)
--- a/.etckeeper
+++ b/.etckeeper
@@ -390,6 +390,8 @@ maybe chmod 0755 'apparmor.d/force-complain'
 maybe chmod 0755 'apparmor.d/libvirt'
 maybe chmod 0644 'apparmor.d/libvirt/TEMPLATE.lxc'
 maybe chmod 0644 'apparmor.d/libvirt/TEMPLATE.qemu'
+maybe chmod 0644 'apparmor.d/libvirt/libvirt-11907b27-d003-4cf9-aac0-27f3ff9a219a'
+maybe chmod 0644 'apparmor.d/libvirt/libvirt-11907b27-d003-4cf9-aac0-27f3ff9a219a.files'
 maybe chmod 0644 'apparmor.d/lightdm-guest-session'
 maybe chmod 0755 'apparmor.d/local'
 maybe chmod 0644 'apparmor.d/local/README'

diff --git a/apparmor.d/libvirt/libvirt-11907b27-d003-4cf9-aac0-27f3ff9a219a b/apparmor.d/libvirt/libvirt-11907b27-d003-4cf9-aac0-27f3ff9a219a
new file mode 100644 (file)
index 0000000..aa705be
--- /dev/null
+++ b/apparmor.d/libvirt/libvirt-11907b27-d003-4cf9-aac0-27f3ff9a219a
@@ -0,0 +1,11 @@
+#
+# This profile is for the domain whose UUID matches this file.
+#
+
+#include <tunables/global>
+
+profile libvirt-11907b27-d003-4cf9-aac0-27f3ff9a219a flags=(attach_disconnected) {
+  #include <abstractions/libvirt-qemu>
+  #include <libvirt/libvirt-11907b27-d003-4cf9-aac0-27f3ff9a219a.files>
+
+}

diff --git a/apparmor.d/libvirt/libvirt-11907b27-d003-4cf9-aac0-27f3ff9a219a.files b/apparmor.d/libvirt/libvirt-11907b27-d003-4cf9-aac0-27f3ff9a219a.files
new file mode 100644 (file)
index 0000000..569261f
--- /dev/null
+++ b/apparmor.d/libvirt/libvirt-11907b27-d003-4cf9-aac0-27f3ff9a219a.files
@@ -0,0 +1,12 @@
+# DO NOT EDIT THIS FILE DIRECTLY. IT IS MANAGED BY LIBVIRT.
+  "/var/log/libvirt/**/centos-stream9.log" w,
+  "/var/lib/libvirt/qemu/domain-centos-stream9/monitor.sock" rw,
+  "/var/lib/libvirt/qemu/domain-1-centos-stream9/*" rw,
+  "/run/libvirt/**/centos-stream9.pid" rwk,
+  "/run/libvirt/**/*.tunnelmigrate.dest.centos-stream9" rw,
+  "/var/lib/images/centos-stream9.qcow2" rwk,
+  "/dev/vhost-net" rw,
+  "/var/lib/libvirt/qemu/domain-1-centos-stream9/{,**}" rwk,
+  "/var/lib/libvirt/qemu/channel/target/domain-1-centos-stream9/{,**}" rwk,
+  "/var/lib/libvirt/qemu/domain-1-centos-stream9/master-key.aes" rwk,
+  "/dev/net/tun" rwk,