From b7a4745bc41baaeb17d48870b1370a8598f0d49e Mon Sep 17 00:00:00 2001
From: Giampaolo Fresi Roglia <giampaolo.fresi.roglia@canonical.com>
Date: Fri, 4 Oct 2024 16:22:50 +0200
Subject: [PATCH] nameservice: add support for libnss-libvirt

(cherry picked from commit e53f300821919fa4cc61b190d5e121d6156431b5)
---
 profiles/apparmor.d/abstractions/nameservice | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/profiles/apparmor.d/abstractions/nameservice b/profiles/apparmor.d/abstractions/nameservice
index 9e0769467..d215b3819 100644
--- a/profiles/apparmor.d/abstractions/nameservice
+++ b/profiles/apparmor.d/abstractions/nameservice
@@ -62,6 +62,9 @@
   # have open
   @{run}/nscd/db*  rmix,
 
+  # make libnss-libvirt name resolution work.
+  /var/lib/libvirt/dnsmasq/*  r,
+
   # The nss libraries are sometimes used in addition to PAM; make sure
   # they are available
   /{usr/,}lib{,32,64}/libnss_*.so*      mr,