[Bug 510213] [NEW] apparmor blocks /usr/local/sbin execution

[Craig]

Public bug reported:

Currently, libvirt doesn't have a way to configure port mappings
(amongst other things). As a workaround, I created a script that my
virtual machine uses in place of running KVM directly, and I placed this
script into /usr/local/sbin (which is a standard place to put such non-
packaged, system-local scripts). This script is used by modifying the
VM's XML file's "<emulator>" block.

When I attempt to launch the VM, I get these errors in the syslog:
Jan 20 11:51:17 encahl kernel: [  426.931144] type=1502 audit(1264006277.718:1165):  operation="file_perm" pid=3595 parent=3541 profile="/usr/sbin/libvirtd//null-22" requested_mask="::r" denied_mask="::r" fsuid=1000 ouid=0 name="/usr/local/sbin/kvm-with-rdp-and-http"

/etc/apparmor.d/usr.sbin.libvirtd can be modified to fix this problem
rather trivially.

** Affects: libvirt (Ubuntu)
     Importance: Undecided
         Status: New

-- 
apparmor blocks /usr/local/sbin execution
https://bugs.launchpad.net/bugs/510213
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to libvirt in ubuntu.