[Bug 438165] [NEW] apparmor profiles in are never deleted

[Jamie Strandboge]

Public bug reported:

Files in /etc/apparmor.d/libvirt/libvirt-* are added whenever a machine
is started, but they are never deleted. Over time, hundreds of unused
files could accumulate in this directory. While
/etc/apparmor.d/libvirt/libvirt-* are meant to be configurable by the
user and shouldn't be simply deleted on boot, some mechanism for
cleaning out the directory should exist. Ideally this should happen on
undefine, but libvirt does not currently have a hook for the security
driver on undefine (this can be added in karmic+1). The easiest solution
would be to add a cron job to clean out old, undefined profiles.

** Affects: libvirt (Ubuntu)
     Importance: Low
     Assignee: Jamie Strandboge (jdstrand)
         Status: Triaged

** Changed in: libvirt (Ubuntu)
   Importance: Undecided => Low

** Changed in: libvirt (Ubuntu)
       Status: New => Triaged

** Changed in: libvirt (Ubuntu)
    Milestone: None => ubuntu-9.10

** Changed in: libvirt (Ubuntu)
     Assignee: (unassigned) => Jamie Strandboge (jdstrand)

-- 
apparmor profiles in are never deleted
https://bugs.launchpad.net/bugs/438165
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to libvirt in ubuntu.