virt-manager cannot start VMs on lucid with v2.6.35 maverick kernel

[Andy Whitcroft]

Binary package hint: virt-manager

I have an uptodate lucid system with the Maverick LTS backports kernel installed, virt-manager fails to start known working VMs with the error below:

Traceback (most recent call last):
  File "/usr/share/virt-manager/virtManager/engine.py", line 588, in run_domain
    vm.startup()
  File "/usr/share/virt-manager/virtManager/domain.py", line 150, in startup
    self._backend.create()
  File "/usr/lib/python2.6/dist-packages/libvirt.py", line 300, in create
    if ret == -1: raise libvirtError ('virDomainCreate() failed', dom=self)
libvirtError: internal error unable to start guest: libvir: Security Labeling error : error calling aa_change_profile()

ProblemType: Bug
DistroRelease: Ubuntu 10.04
Package: virt-manager 0.8.2-2ubuntu8
ProcVersionSignature: Ubuntu 2.6.35-6.9hotplug201007012005-generic 2.6.35-rc3
Uname: Linux 2.6.35-6-generic x86_64
Architecture: amd64
Date: Tue Jul 6 16:10:08 2010
EcryptfsInUse: Yes
PackageArchitecture: all
ProcEnviron:
 PATH=(custom, user)
 LANG=en_GB.utf8
 SHELL=/bin/bash
SourcePackage: virt-manager

[Serge Hallyn (serge-hallyn)]

Here is the tail of my audit log:

type=AVC msg=audit(1278430265.975:423): operation="getattr" pid=1369 parent=1 profile="/usr/sbin/libvirtd" name="/" pid=1369 comm="libvirtd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
type=SYSCALL msg=audit(1278430265.975:423): arch=c000003e syscall=4 success=no exit=-13 a0=7f06c7828347 a1=7f06c7828740 a2=7f06c7828740 a3=3 items=0 ppid=1 pid=1369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" key=(null)
type=AVC msg=audit(1278430265.975:424): operation="getattr" pid=1369 parent=1 profile="/usr/sbin/libvirtd" name="/" pid=1369 comm="libvirtd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
type=SYSCALL msg=audit(1278430265.975:424): arch=c000003e syscall=4 success=no exit=-13 a0=7f06c7828377 a1=7f06c7828740 a2=7f06c7828740 a3=3 items=0 ppid=1 pid=1369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" key=(null)
type=AVC msg=audit(1278430268.966:425): operation="getattr" pid=1371 parent=1 profile="/usr/sbin/libvirtd" name="/" pid=1371 comm="libvirtd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
type=SYSCALL msg=audit(1278430268.966:425): arch=c000003e syscall=4 success=no exit=-13 a0=7f06c6426377 a1=7f06c6426740 a2=7f06c6426740 a3=3 items=0 ppid=1 pid=1371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" key=(null)
type=AVC msg=audit(1278430268.966:426): operation="getattr" pid=1371 parent=1 profile="/usr/sbin/libvirtd" name="/" pid=1371 comm="libvirtd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
type=SYSCALL msg=audit(1278430268.966:426): arch=c000003e syscall=4 success=no exit=-13 a0=7f06c6426347 a1=7f06c6426740 a2=7f06c6426740 a3=3 items=0 ppid=1 pid=1371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" key=(null)
type=AVC msg=audit(1278430268.966:427): operation="getattr" pid=1371 parent=1 profile="/usr/sbin/libvirtd" name="/" pid=1371 comm="libvirtd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
type=SYSCALL msg=audit(1278430268.966:427): arch=c000003e syscall=4 success=no exit=-13 a0=7f06c6426377 a1=7f06c6426740 a2=7f06c6426740 a3=3 items=0 ppid=1 pid=1371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" key=(null)

[Marc Deslauriers (mdeslaur)]

looks like a dupe of #599450