Comment 8 for bug 1374554

Revision history for this message
Scott Moser (smoser) wrote :

verified this is still broken.
[1355493.845370] audit: type=1400 audit(1415183670.500:26): apparmor="STATUS" operation="profile_load" profile="unconfined" name="libvirt-184f2f3d-e71b-4cb3-a58c-9feab5c361b6" pid=94288 comm="apparmor_parser"
[1355493.845600] audit: type=1400 audit(1415183670.500:27): apparmor="STATUS" operation="profile_load" profile="unconfined" name="qemu_bridge_helper" pid=94288 comm="apparmor_parser"
[1355493.946737] audit: type=1400 audit(1415183670.604:28): apparmor="DENIED" operation="open" profile="libvirt-184f2f3d-e71b-4cb3-a58c-9feab5c361b6" name="/usr/share/slof/spapr-rtas.bin" pid=94290 comm="qemu-system-ppc" requested_mask="r" denied_mask="r" fsuid=107 ouid=0
[1355497.187373] audit: type=1400 audit(1415183673.844:29): apparmor="STATUS" operation="profile_remove" profile="unconfined" name="libvirt-184f2f3d-e71b-4cb3-a58c-9feab5c361b6" pid=94317 comm="apparmor_parser"

and verified that this fixes:
$ sudo diff -u /etc/apparmor.d/abstractions/libvirt-qemu.dist /etc/apparmor.d/abstractions/libvirt-qemu
--- /etc/apparmor.d/abstractions/libvirt-qemu.dist 2014-11-05 10:35:35.572911000 +0000
+++ /etc/apparmor.d/abstractions/libvirt-qemu 2014-11-05 10:36:05.392911000 +0000
@@ -76,6 +76,7 @@
   /usr/share/vgabios/** r,
   /usr/share/seabios/** r,
   /usr/share/ovmf/** r,
+ /usr/share/slof/** r,

   # access PKI infrastructure
   /etc/pki/libvirt-vnc/** r,