http://bugzilla.novell.com/show_bug.cgi?id=1102890 Bug ID: 1102890 Summary: apparmor prohibits libvirt vm start of ovmf UEFI rom images Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: AppArmor Assignee: suse-beta@cboltz.de Reporter: ralf.koelmel@kit.edu QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- Created attachment 778232 --> http://bugzilla.novell.com/attachment.cgi?id=778232&action=edit logs from libvirtd libvirt VM configurations, which are using UEFI rom images from qemu-ovmf package, aren't starting, because Apparmor libvirt helper virt-aa-helper doesn't allow these installed images. I've tried to extend the apparmor profile with a local addon for virt-aa-helper to allow the images (/usr/share/qemu/* rix), but it doesn't change anything. The following version are involved under Leap 15.0 : qemu-ovmf-x86_64 : 2017+git1510945757.b2662641d5-lp150.3.1 apparmor : 20171206-lp150.15.6.1 libvirt : 4.0.0-lp150.7.3.1 In the attached file are the libvirtd messages during startup of such a VM. It isn't a principal probem with the ovmf images, because they are running, if i disable the libvirtd apparmor profile. -- You are receiving this mail because: You are on the CC list for the bug.