[Bug 545795] [NEW] virt-manager allows selection of PCI devices for a VM but apparmor is not configured to allow access to the PCI device

[Claas Hilbrecht]

Public bug reported:

Description:	Ubuntu lucid (development branch)
Release:	10.04

If I try to use a "Ethernet controller: Intel Corporation 82576 Virtual
Function (rev 01)" network device for a VM I can select the device via
virt-manager. But if I try to start such a VM the VM won't start because
the apparmor profile for the VM is not updated to allow access to the
PCI device (the same is true for USB devices).  This gives the following
messages:

Mar 20 15:33:43 horst kernel: [ 1178.108436] type=1503 audit(1269095623.007:27):  operation="open" pid=4902 parent=1 profile="libvirt-fde0ac99-0184-edd3-ab69-d53d6a940c36" requested_mask="r::" denied_mask="r::" fsuid=0 ouid=0 name="/sys/devices/pci0000:00/0000:00:01.0/0000:0a:10.0/config"
Mar 20 15:33:43 horst libvirtd: 15:33:43.183: error : qemudWaitForMonitor:1536 : internal error unable to start guest: char device redirected to /dev/pts/2#012device: 0a:10.0: driver="pci-assign" host="0a:10.0"#012get_real_device: /sys/bus/pci/devices/0000:0a:10.0/config: Permission denied#012pci-assign: Error: Couldn't get real device (0a:10.0)!#012Error initializing device pci-assign#012

virt-manager should create the neccessary entries in the apparmor
profile for Physical Host Devices automaticly.

virt-manager                         0.8.2-2ubuntu6
ibvirt-bin                          0.7.5-5ubuntu15
apparmor                             2.5-0ubuntu1

** Affects: libvirt (Ubuntu)
     Importance: Undecided
         Status: New

-- 
virt-manager allows selection of PCI devices for a VM but apparmor is not configured to allow access to the PCI device
https://bugs.launchpad.net/bugs/545795
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to libvirt in ubuntu.