From 5be4295b5ae833491b56f5892144454e769889dd Mon Sep 17 00:00:00 2001
From: Giampaolo Fresi Roglia <giampaolo.fresi.roglia@canonical.com>
Date: Wed, 16 Oct 2024 10:48:03 +0200
Subject: [PATCH] abstractions/nameservice: tighten libnss_libvirt file access

---
 profiles/apparmor.d/abstractions/nameservice | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/profiles/apparmor.d/abstractions/nameservice b/profiles/apparmor.d/abstractions/nameservice
index d215b3819..14f1a6828 100644
--- a/profiles/apparmor.d/abstractions/nameservice
+++ b/profiles/apparmor.d/abstractions/nameservice
@@ -63,7 +63,8 @@
   @{run}/nscd/db*  rmix,
 
   # make libnss-libvirt name resolution work.
-  /var/lib/libvirt/dnsmasq/*  r,
+  /var/lib/libvirt/dnsmasq/  r,
+  /var/lib/libvirt/dnsmasq/*.status  r,
 
   # The nss libraries are sometimes used in addition to PAM; make sure
   # they are available