[Bug 632696] Re: libvirt won't start a VM with serial or console when apparmor is enabled

[Jamie Strandboge]

We can create a child profile for pt_chown so only it would get
cap_fowner. Can you try the following in /etc/apparmor.d/abstractions
/libvirt-qemu:

  owner @{PROC}/[0-9]*/fd/ r,
  owner @{PROC}/[0-9]*/fd/3 r,
  /usr/lib/pt_chown cix -> libvirt_pt_chown,

  profile libvirt_pt_chown {
    capability fowner,
  }

-- 
libvirt won't start a VM with serial or console when apparmor is enabled
https://bugs.launchpad.net/bugs/632696
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to libvirt in ubuntu.