Fix AppArmor profile for ppc64le

JeremyRand · May 24, 2021 · 621f7c2 · 621f7c2
1 parent dd18865
commit 621f7c2
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/etc/apparmor.d/usr.bin.systemcheck b/etc/apparmor.d/usr.bin.systemcheck
@@ -254,6 +254,8 @@
 	/sys/devices/virtual/dmi/id/product_name r,
 	/sys/hypervisor/type r,
 	/sys/devices/*/net/*/carrier r,
+	## For systemd-detect-virt on ppc64le pseries.
+	/sys/firmware/devicetree/base/hypervisor/compatible r,
 	## For systemd-detect-virt in Qubes.
 	/sys/hypervisor/properties/features r,
 

diff --git a/etc/apparmor.d/usr.lib.systemcheck.canary b/etc/apparmor.d/usr.lib.systemcheck.canary
@@ -59,6 +59,8 @@
 	/sys/hypervisor/type r,
 	/sys/devices/*/net/*/carrier r,
 	/sys/devices/virtual/dmi/id/sys_vendor r,
+	## For systemd-detect-virt on ppc64le pseries.
+	/sys/firmware/devicetree/base/hypervisor/compatible r,
 	## For systemd-detect-virt in Qubes.
 	/sys/hypervisor/properties/features r,