[Bug 510213] Re: apparmor blocks /usr/local/sbin execution

[Jamie Strandboge]

While wrapper scripts are somewhat common so people can get at qemu's functionality that isn't exposed to libvirt, there is not really a safe way to add this to the profile. Sure, we could add /usr/local/sbin/* or some other path, but:
a) this allows everything in /usr/local/sbin/, which is not desired (we only really want the emulator)
b) some, if not many, of these wrapper scripts will need additional rules added to the profile

Marking Won't Fix. A wrapper around the emulator is effectively a new
emulator to libvirt and appropriate rules must be added to the profile.

** Changed in: libvirt (Ubuntu)
       Status: Triaged => Won't Fix

-- 
apparmor blocks /usr/local/sbin execution
https://bugs.launchpad.net/bugs/510213
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to libvirt in ubuntu.