virt-manager0.9.0-1ubuntu3 switches owner of .iso files to libvirt-qemu automatically

[Sasa Paporovic]

I am on Ubuntu11.10 64bit updated to 28.3.2012.

I am using virt-manager0.9.0-1ubuntu3 to accessing qemu-kvm 0.14.1+noroms-0ubuntu6.3.

During creating a new virtual machine with a locally saved operating system .iso , virt-manager or qemu-kvm switches the owner of the .iso to "libvirt-qemu" which can be seen by using nautilus.

All other users have no more right on the .iso file.

After succesfull installation of the operating sytem from the .iso and following detaching the .iso the owner of it keeps "libvirt-qemu" and all other users are still excluded in all rights.

This is not so usefull, especially when using daily buils of operating sytems, which should replace the old .iso file.

ProblemType: Bug
DistroRelease: Ubuntu 11.10
Package: virt-manager 0.9.0-1ubuntu3
ProcVersionSignature: Ubuntu 3.0.0-17.30-generic 3.0.22
Uname: Linux 3.0.0-17-generic x86_64
ApportVersion: 1.23-0ubuntu4
Architecture: amd64
Date: Wed Mar 28 12:30:02 2012
InstallationMedia: Ubuntu 11.10 "Oneiric Ocelot" - Release amd64+mac (20111011)
PackageArchitecture: all
ProcEnviron:
 PATH=(custom, no User Name)
 LANG=de_DE.UTF-8
 SHELL=/bin/bash
SourcePackage: virt-manager
UpgradeStatus: No upgrade log present (probably fresh install)

[Sasa Paporovic (melchiaros)]

This should be reproducible on every sytem.

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Jeremy (jeremy-redhat-bugs)]

Description of problem:
libvirt chown ISO's to the qemu system user, which breaks the tool I use to downwload Ubuntu daily images.

Version-Release number of selected component (if applicable):
libvirt 1.0.0-0ubuntu3 on Ubuntu 13.04 Alpha

Steps to Reproduce:
1. Use virt-manager to boot an ISO from your home directory.
2. ls -lh reveals that the ownership of the ISO has changed to libvirt-qemu:kvm (on Fedora, it may be qemu:qemu)

Expected results:
Since an iso is read-only like a regular CD, there shouldn't be any need for libvirt to chown the ISO just to read it.

Additional info:
This bug was discussed as the actual root cause for bug 517304 but it was basically worked around instead.

[Cole (cole-redhat-bugs)]

*** Bug 972997 has been marked as a duplicate of this bug. ***

[Ján (jn-redhat-bugs)]

This can be worked around by adding:
<seclabel model='dac' relabel='no'/>
to the disk's source since:
commit 3c2487ab0aaf400ca85866f31a7f5b413afd2ce7
Author: Jim Fehlig <email address hidden>
AuthorDate: 2014-05-15 15:30:26 -0600
Commit: Jim Fehlig <email address hidden>
CommitDate: 2014-05-16 15:32:14 -0600

    security_dac: honor relabel='no' in disk config

    https://bugzilla.redhat.com/show_bug.cgi?id=999301

    The DAC driver ignores the relabel='no' attribute in disk config

      <disk type='file' device='floppy'>
        <driver name='qemu' type='raw'/>
        <source file='/some/path/floppy.img'>
          <seclabel model='dac' relabel='no'/>
        </source>
        <target dev='fda' bus='fdc'/>
        <readonly/>
      </disk>

    This patch avoid labeling disks when relabel='no' is specified.

    Signed-off-by: Michal Privoznik <email address hidden>
    Signed-off-by: Jim Fehlig <email address hidden>

git describe: v1.2.4-85-g3c2487a contains: v1.2.5-rc1~44

[Michal (michal-redhat-bugs)]

Closing per comment 2.