Mailinglist Archive: opensuse-factory (454 mails)

< Previous Next >
Re: [opensuse-factory] apparmor, kernel 4.14 and libvirtd
Hello,

Am Freitag, 1. Dezember 2017, 13:35:00 CET schrieb Michael Ströder:
Michael Ströder wrote:

to file /etc/apparmor.d/abstractions/libvirt-qemu but still I get
this for virsh destroy <domain-name>:

type=AVC msg=audit(1512131425.439:1714): apparmor="DENIED"
operation="signal" profile="/usr/sbin/libvirtd" pid=6059
comm="libvirtd" requested_mask="send" denied_mask="send"
signal=term peer="unconfined"
And virsh start <domain-name> fails with:

type=AVC msg=audit(1512131645.930:1919): apparmor="DENIED"
operation="mount" info="failed mntpnt match" error=-13
profile="/usr/sbin/libvirtd" name="/" pid=7179 comm="libvirtd"
flags="rw, rslave"

Can you please check if you have *.rpmnew files in /etc/apparmor.d/ ?
Both events you listed should be covered by the latest
/etc/apparmor.d/usr.sbin.libvirtd profile already.


Regards,

Christian Boltz
--
ich wollte wohl eigentlich sagen / demonstrieren, dass
Updateritis heilbar sein kann...
Das mag sein, aber der Entwöhnungsprozess kann dauern...
[> David Haller und Michael Höhne in suse-linux]

--
To unsubscribe, e-mail: opensuse-factory+unsubscribe@xxxxxxxxxxxx
To contact the owner, e-mail: opensuse-factory+owner@xxxxxxxxxxxx

< Previous Next >
Follow Ups