[Bug 1968187] Re: apparmor denial when using swtpm

[Launchpad Bug Tracker]

** Merge proposal linked:
   https://code.launchpad.net/~lvoytek/ubuntu/+source/libvirt/+git/libvirt/+merge/419329

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to swtpm in Ubuntu.
https://bugs.launchpad.net/bugs/1968187

Title:
  apparmor denial when using swtpm

Status in libvirt package in Ubuntu:
  In Progress
Status in swtpm package in Ubuntu:
  In Progress

Bug description:
  Guest using:
  <devices>
   <tpm model='tpm-tis'>
    <backend type='emulator' version='2.0'/>
   </tpm>
  </devices>

  Triggers:
  apparmor="DENIED" operation="open" profile="libvirt-202a34a9-2ee2-4826-b206-c249f535be90" name="/etc/ssl/openssl.cnf" pid=15149 comm="swtpm" requested_mask="r" denied_mask="r" fsuid=113 ouid=0

  Find from the swtpm side, but we need to open up the guest as well.
  OTOH it is not fatal, and you'd wonder why qemu needs it - will need to check and then allow or deny this.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1968187/+subscriptions