Hemanth Nakkina 88021ef4a1 interfaces/microstack-support: read access to /proc/task/sched{,stat} ...

microstack requires read access to @{PROC}/*/{,task/*/}sched and
@{PROC}/*/{,task/*/}schedstat to allow virsh to read cpu statistics
of the instances.

Without this rule, openstack-hypervisor.virsh domstat list does not
print cpu statistics, vcpu.<id>.time, vcpu.<id>.stat.

Apparmor deny rule in dmesg:
[98847.604617] audit: type=1400 audit(1693470840.357:1499): \
apparmor="DENIED" operation="open" profile="snap.openstack-hypervisor.libvirtd" \
name="/proc/2014588/task/2014595/sched" pid=3668724 comm="rpc-libvirtd" \
requested_mask="r" denied_mask="r" fsuid=0 ouid=0

This rule is also required by ceilometer service running on the
openstack-hypervisor snap which queries libvirt for the cpu/memory/disk
statistics of the instances running on hypervisor.

2023-10-12 12:28:16 +02:00

..

apparmor

many: s/ioutil.WriteFile/os.WriteFile (#13217)

2023-09-26 11:38:46 +01:00

backends

i/backends,o/ifacestate: cleanup backends.All

2022-10-02 16:37:41 +02:00

builtin

interfaces/microstack-support: read access to /proc/task/sched{,stat}

2023-10-12 12:28:16 +02:00

dbus

many: s/ioutil.WriteFile/os.WriteFile (#13217)

2023-09-26 11:38:46 +01:00

hotplug

asserts,interfaces,snap: fix imports order (according to gci)

2021-06-14 20:54:41 +02:00

ifacetest

interfaces: add some tests for the mount backend ns update case

2023-07-05 14:43:37 +02:00

kmod

i/kmod/kmod_test: simplify variable declaration

2022-06-23 18:08:10 +03:00

mount

many: s/ioutil.WriteFile/os.WriteFile (#13217)

2023-09-26 11:38:46 +01:00

policy

interfaces: review and extend README.md (#13247)

2023-10-09 15:43:15 +02:00

polkit

many: s/ioutil.WriteFile/os.WriteFile (#13217)

2023-09-26 11:38:46 +01:00

seccomp

many: s/ioutil.WriteFile/os.WriteFile (#13217)

2023-09-26 11:38:46 +01:00

systemd

systemd: fix snapd systemd-unit stop progress notifications (#11340)

2022-05-20 17:29:05 +02:00

udev

interfaces/udev: do not tag modules

2023-06-15 15:21:15 +02:00

utils

interfaces/utils: allow commas in filepaths (#12697)

2023-05-19 21:49:40 +02:00

backend.go

interfaces: add extraLayouts to support additional mount entries

2022-04-22 09:24:15 +02:00

connection_test.go

many: add tests for attribute readers

2022-01-21 12:31:25 +03:00

connection.go

many: add helper function for type conversions

2022-01-14 12:12:50 +03:00

core_test.go

interfaces: get rid of . import of interfaces itself

2021-06-14 20:50:15 +02:00

core.go

interfaces: review and extend README.md (#13247)

2023-10-09 15:43:15 +02:00

export_test.go

many: add tests for attribute readers

2022-01-21 12:31:25 +03:00

helpers_test.go

Don't log errors from SetupMany helper - return them to the caller (regenerateSecurityProfiles) and log there.

2019-10-07 20:37:03 +02:00

helpers.go

Don't log errors from SetupMany helper - return them to the caller (regenerateSecurityProfiles) and log there.

2019-10-07 20:37:03 +02:00

naming_test.go

interfaces: make the service naming entirely internal to systemd BE

2021-07-09 18:47:12 +02:00

naming.go

interfaces: make the service naming entirely internal to systemd BE

2021-07-09 18:47:12 +02:00

repo_test.go

Fixes related to inclusive language.

2022-04-14 12:51:08 +02:00

repo.go

many: replace use of "sanity" with more inclusive naming

2022-03-16 09:10:59 +01:00

sorting_test.go

interfaces: helpers for sorting plug/slot/connection refs

2019-01-17 11:00:50 +01:00

sorting.go

interfaces: helpers for sorting plug/slot/connection refs

2019-01-17 11:00:50 +01:00

system_key_test.go

many: s/ioutil.WriteFile/os.WriteFile (#13217)

2023-09-26 11:38:46 +01:00

system_key.go

many: reinstate vendored apparmor (#12543)

2023-04-21 10:27:28 +02:00