saving uncommitted changes in /etc prior to apt run

diff --git a/.etckeeper b/.etckeeper
index 6b3b6e628a6360f4820466ba05dfb2e4b4f9933b..4d0018b1591031c1b749be4c3bee697e89f76497 100755 (executable)
--- a/.etckeeper
+++ b/.etckeeper
@@ -390,6 +390,8 @@ maybe chmod 0755 'apparmor.d/force-complain'
 maybe chmod 0755 'apparmor.d/libvirt'
 maybe chmod 0644 'apparmor.d/libvirt/TEMPLATE.lxc'
 maybe chmod 0644 'apparmor.d/libvirt/TEMPLATE.qemu'
+maybe chmod 0644 'apparmor.d/libvirt/libvirt-11907b27-d003-4cf9-aac0-27f3ff9a219a'
+maybe chmod 0644 'apparmor.d/libvirt/libvirt-11907b27-d003-4cf9-aac0-27f3ff9a219a.files'
 maybe chmod 0644 'apparmor.d/lightdm-guest-session'
 maybe chmod 0755 'apparmor.d/local'
 maybe chmod 0644 'apparmor.d/local/README'

diff --git a/apparmor.d/libvirt/libvirt-11907b27-d003-4cf9-aac0-27f3ff9a219a b/apparmor.d/libvirt/libvirt-11907b27-d003-4cf9-aac0-27f3ff9a219a
new file mode 100644 (file)
index 0000000..aa705be
--- /dev/null
+++ b/apparmor.d/libvirt/libvirt-11907b27-d003-4cf9-aac0-27f3ff9a219a
@@ -0,0 +1,11 @@
+#
+# This profile is for the domain whose UUID matches this file.
+#
+
+#include <tunables/global>
+
+profile libvirt-11907b27-d003-4cf9-aac0-27f3ff9a219a flags=(attach_disconnected) {
+  #include <abstractions/libvirt-qemu>
+  #include <libvirt/libvirt-11907b27-d003-4cf9-aac0-27f3ff9a219a.files>
+
+}

diff --git a/apparmor.d/libvirt/libvirt-11907b27-d003-4cf9-aac0-27f3ff9a219a.files b/apparmor.d/libvirt/libvirt-11907b27-d003-4cf9-aac0-27f3ff9a219a.files
new file mode 100644 (file)
index 0000000..569261f
--- /dev/null
+++ b/apparmor.d/libvirt/libvirt-11907b27-d003-4cf9-aac0-27f3ff9a219a.files
@@ -0,0 +1,12 @@
+# DO NOT EDIT THIS FILE DIRECTLY. IT IS MANAGED BY LIBVIRT.
+  "/var/log/libvirt/**/centos-stream9.log" w,
+  "/var/lib/libvirt/qemu/domain-centos-stream9/monitor.sock" rw,
+  "/var/lib/libvirt/qemu/domain-1-centos-stream9/*" rw,
+  "/run/libvirt/**/centos-stream9.pid" rwk,
+  "/run/libvirt/**/*.tunnelmigrate.dest.centos-stream9" rw,
+  "/var/lib/images/centos-stream9.qcow2" rwk,
+  "/dev/vhost-net" rw,
+  "/var/lib/libvirt/qemu/domain-1-centos-stream9/{,**}" rwk,
+  "/var/lib/libvirt/qemu/channel/target/domain-1-centos-stream9/{,**}" rwk,
+  "/var/lib/libvirt/qemu/domain-1-centos-stream9/master-key.aes" rwk,
+  "/dev/net/tun" rwk,