[Bug 484562] [NEW] apparmor prevents libvirt-vnc certificate from being read

[Bryan McLellan]

Public bug reported:

libvirt + kvm need to be able to read the certificates when using TLS to
connect to VNC.

Nov 17 17:08:09 lasvirt01 kernel: [69476.008895] type=1503
audit(1258506489.178:77): operation="open" pid=17104 parent=1 profile
="libvirt-600d5dae-6373-107e-5f1b-5010aff3ffed" requested_mask="r::"
denied_mask="r::" fsuid=0 ouid=0 name="/etc/pki/libvirt-vnc/ca-cert.pem"

libvirt 0.7.0-1ubuntu13.1
kvm 1:84+dfsg-0ubuntu16+0.11.0+0ubuntu6.3
apparmor 2.3.1+1403-0ubuntu27.2

Add "/etc/pki/libvirt-vnc/** r," to "/etc/apparmor.d/abstractions
/libvirt-qemu"

** Affects: libvirt (Ubuntu)
     Importance: Undecided
         Status: New

-- 
apparmor prevents libvirt-vnc certificate from being read
https://bugs.launchpad.net/bugs/484562
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to libvirt in ubuntu.