[Bug 1560149] Re: missing seccomp whitelist for qemu-kvm

Tue Apr 12 00:27:44 UTC 2016

The attachment "lp1560149.debdiff" seems to be a debdiff.  The ubuntu-
sponsors team has been subscribed to the bug report so that they can
review and hopefully sponsor the debdiff.  If the attachment isn't a
patch, please remove the "patch" flag from the attachment, remove the
"patch" tag, and if you are member of the ~ubuntu-sponsors, unsubscribe
the team.

[This is an automated message performed by a Launchpad user owned by
~brian-murray, for any issue please contact him.]

** Tags added: patch

-- 
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1560149

Title:
  missing seccomp whitelist for qemu-kvm

Status in libvirt package in Ubuntu:
  Invalid
Status in qemu package in Ubuntu:
  New

Bug description:
  Steps to reproduce:

  1) set "seccomp_sandbox = 1" in /etc/libvirt/qemu.conf
  2) restart libvirt-bin
  3) create a guest using the attached .xml file
  4) start the guest

  Current behavior: the guest will remain in the "paused" state and fail
  to start because of this:

  audit: type=1326 audit(1458582324.294:87): auid=4294967295 uid=114
  gid=123 ses=4294967295 pid=17695 comm="qemu-system-x86" exe="/usr/bin
  /qemu-system-x86_64" sig=31 arch=c000003e syscall=99 compat=0
  ip=0x7fc47c3557d7 code=0x0

  Expected behavior: the guest would start normally

  ProblemType: Bug
  DistroRelease: Ubuntu 16.04
  Package: libvirt-bin 1.3.1-1ubuntu6
  ProcVersionSignature: Ubuntu 4.4.0-15.31-generic 4.4.6
  Uname: Linux 4.4.0-15-generic x86_64
  NonfreeKernelModules: zfs zunicode zcommon znvpair zavl
  ApportVersion: 2.20-0ubuntu3
  Architecture: amd64
  CurrentDesktop: Unity
  Date: Mon Mar 21 13:40:41 2016
  KernLog:

  SourcePackage: libvirt
  UpgradeStatus: No upgrade log present (probably fresh install)
  modified.conffile..etc.libvirt.qemu.conf: [inaccessible: [Errno 13] Permission denied: '/etc/libvirt/qemu.conf']
  modified.conffile..etc.libvirt.qemu.networks.default.xml: [deleted]

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1560149/+subscriptions