saving uncommitted changes in /etc prior to apt run

diff --git a/.etckeeper b/.etckeeper
index 0f8f1b116f6087a006579dfc9d429fda8c324fc3..cee4abfdcc462c5b01b18e1afbf5f22b1c997576 100755 (executable)
--- a/.etckeeper
+++ b/.etckeeper
@@ -421,6 +421,7 @@ maybe chmod 0644 'apparmor.d/libvirt/TEMPLATE.qemu'
 maybe chmod 0644 'apparmor.d/libvirt/libvirt-11907b27-d003-4cf9-aac0-27f3ff9a219a'
 maybe chmod 0644 'apparmor.d/libvirt/libvirt-4b17a410-c416-4938-9262-3c1e2459bb31'
 maybe chmod 0644 'apparmor.d/libvirt/libvirt-7676f318-2b9a-4d6f-9762-bbae648d6b8c'
+maybe chmod 0644 'apparmor.d/libvirt/libvirt-7676f318-2b9a-4d6f-9762-bbae648d6b8c.files'
 maybe chmod 0644 'apparmor.d/lightdm-guest-session'
 maybe chmod 0755 'apparmor.d/local'
 maybe chmod 0644 'apparmor.d/local/README'

diff --git a/apparmor.d/libvirt/libvirt-7676f318-2b9a-4d6f-9762-bbae648d6b8c.files b/apparmor.d/libvirt/libvirt-7676f318-2b9a-4d6f-9762-bbae648d6b8c.files
new file mode 100644 (file)
index 0000000..7575fb7
--- /dev/null
+++ b/apparmor.d/libvirt/libvirt-7676f318-2b9a-4d6f-9762-bbae648d6b8c.files
@@ -0,0 +1,12 @@
+# DO NOT EDIT THIS FILE DIRECTLY. IT IS MANAGED BY LIBVIRT.
+  "/var/log/libvirt/**/rocky9.log" w,
+  "/var/lib/libvirt/qemu/domain-rocky9/monitor.sock" rw,
+  "/var/lib/libvirt/qemu/domain-1-rocky9/*" rw,
+  "/run/libvirt/**/rocky9.pid" rwk,
+  "/run/libvirt/**/*.tunnelmigrate.dest.rocky9" rw,
+  "/var/lib/images/rocky9.qcow2" rwk,
+  "/dev/vhost-net" rw,
+  "/var/lib/libvirt/qemu/domain-1-rocky9/{,**}" rwk,
+  "/var/lib/libvirt/qemu/channel/target/domain-1-rocky9/{,**}" rwk,
+  "/var/lib/libvirt/qemu/domain-1-rocky9/master-key.aes" rwk,
+  "/dev/net/tun" rwk,