[Bug 1950631] Re: wrap swtpm in an apparmor profile

[Lena Voytek]

** Also affects: swtpm (Ubuntu)
   Importance: Undecided
       Status: New

** Changed in: swtpm (Ubuntu)
       Status: New => In Progress

** Changed in: libvirt (Ubuntu)
       Status: Triaged => In Progress

** Changed in: swtpm (Ubuntu)
     Assignee: (unassigned) => Lena Voytek (lvoytek)

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to swtpm in Ubuntu.
https://bugs.launchpad.net/bugs/1950631

Title:
  wrap swtpm in an apparmor profile

Status in libvirt package in Ubuntu:
  In Progress
Status in swtpm package in Ubuntu:
  In Progress

Bug description:
  This is a spin off from MIR bug 1948748 for swtpm.

  As we can see in bug 1859506 it currently seems to run in guest-
  context which is good as that is already rather reduced and safer than
  e.g. the libvirt daemon.

  But still we should evaluate adding a further reduced profile just for
  swtpm and have it transition there.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1950631/+subscriptions