saving uncommitted changes in /etc prior to apt run

diff --git a/.etckeeper b/.etckeeper
index c61137881deb73d88c9bcf9fc06979817b37613f..7003da9aff1d9a91d7c30712563baa7ecbd299e3 100755 (executable)
--- a/.etckeeper
+++ b/.etckeeper
@@ -422,6 +422,7 @@ maybe chmod 0644 'apparmor.d/libvirt/TEMPLATE.qemu'
 maybe chmod 0644 'apparmor.d/libvirt/libvirt-11907b27-d003-4cf9-aac0-27f3ff9a219a'
 maybe chmod 0644 'apparmor.d/libvirt/libvirt-4b17a410-c416-4938-9262-3c1e2459bb31'
 maybe chmod 0644 'apparmor.d/libvirt/libvirt-7676f318-2b9a-4d6f-9762-bbae648d6b8c'
+maybe chmod 0644 'apparmor.d/libvirt/libvirt-7676f318-2b9a-4d6f-9762-bbae648d6b8c.files'
 maybe chmod 0644 'apparmor.d/lightdm-guest-session'
 maybe chmod 0755 'apparmor.d/local'
 maybe chmod 0644 'apparmor.d/local/README'

diff --git a/apparmor.d/libvirt/libvirt-7676f318-2b9a-4d6f-9762-bbae648d6b8c.files b/apparmor.d/libvirt/libvirt-7676f318-2b9a-4d6f-9762-bbae648d6b8c.files
new file mode 100644 (file)
index 0000000..7575fb7
--- /dev/null
+++ b/apparmor.d/libvirt/libvirt-7676f318-2b9a-4d6f-9762-bbae648d6b8c.files
@@ -0,0 +1,12 @@
+# DO NOT EDIT THIS FILE DIRECTLY. IT IS MANAGED BY LIBVIRT.
+  "/var/log/libvirt/**/rocky9.log" w,
+  "/var/lib/libvirt/qemu/domain-rocky9/monitor.sock" rw,
+  "/var/lib/libvirt/qemu/domain-1-rocky9/*" rw,
+  "/run/libvirt/**/rocky9.pid" rwk,
+  "/run/libvirt/**/*.tunnelmigrate.dest.rocky9" rw,
+  "/var/lib/images/rocky9.qcow2" rwk,
+  "/dev/vhost-net" rw,
+  "/var/lib/libvirt/qemu/domain-1-rocky9/{,**}" rwk,
+  "/var/lib/libvirt/qemu/channel/target/domain-1-rocky9/{,**}" rwk,
+  "/var/lib/libvirt/qemu/domain-1-rocky9/master-key.aes" rwk,
+  "/dev/net/tun" rwk,