Ubuntu
libvirt package

apparmor profile denies access to alsa

Bug #437854 reported by Jamie Strandboge
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
libvirt (Ubuntu)
Fix Released
Medium
Jamie Strandboge
Ubuntu ubuntu-9.10
Karmic
Fix Released
Medium
Jamie Strandboge
Ubuntu ubuntu-9.10

Bug Description

Try to create a new VM with a karmic desktop install CD and get this in audit.log:
type=APPARMOR_DENIED msg=audit(1254087656.765:34): operation="open" pid=16669 parent=1 profile="libvirt-d7f9680e-25e3-1384-713d-7c470417d3da" requested_mask="r::" denied_mask="r::" fsuid=0 ouid=0 name="/usr/share/alsa/alsa.conf". Need to allow the audio abstraction in abstractions/libvirt-qemu.

Related branches

lp:ubuntu/karmic/libvirt
Jamie Strandboge (jdstrand)
Changed in libvirt (Ubuntu Karmic):
status: New → Triaged
assignee: nobody → Jamie Strandboge (jdstrand)
importance: Undecided → Medium
milestone: none → ubuntu-9.10
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

This needs a few more things besides abstractions/audio. I'll upload after beta.

Changed in libvirt (Ubuntu Karmic):
status: Triaged → In Progress
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package libvirt - 0.7.0-1ubuntu9

---------------
libvirt (0.7.0-1ubuntu9) karmic; urgency=low

  * allow access for sound (LP: #437854)
    - abstractions/libvirt-qemu: add very specific rules for allowing ALSA. We
      do not use the audio abstraction because the virtual machine runs as root
      and therefore DAC cannot be used as a fallback.
    - debian/README.Debian: add some text to encourage review of the AppArmor
      profiles and abstraction when using in production environments
  * debian/libvirt-bin.cron.daily: added to clean out old profiles that are no
    longer associated with a virtual machine definition (LP: #438165)
  * debian/patches/9091-apparmor.patch:
    - quote the pid, monitor and logfile in case any of them have weird
      characters (complete fix for LP: #432810)
    - support <readonly/> for disks

 -- Jamie Strandboge <email address hidden> Mon, 05 Oct 2009 16:31:12 -0500

Changed in libvirt (Ubuntu Karmic):
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.