I've been unable to re-produce this issue on either Lucid or Maverick although they do exhibit different behaviour.
test.qcow2 -> test_base.qcow2 -> base/lenny_vase.qcow2 (sym link to lenny.qcow2)
Lucid apparmor profile:
"/var/log/libvirt/**/test.log" w, "/var/lib/libvirt/**/test.monitor" rw, "/var/run/libvirt/**/test.pid" rwk, "/home/jamespage/vms/test_base.qcow2" rw, "/home/jamespage/vms/base/lenny.qcow2" rw, "/home/jamespage/vms/test.qcow2" rw, "/home/jamespage/reference/isos/ubuntu-server/maverick-server-i386.iso" r, # don't audit writes to readonly files deny "/home/jamespage/reference/isos/ubuntu-server/maverick-server-i386.iso" w,
Maverick apparmor profile:
"/var/log/libvirt/**/test.log" w, "/var/lib/libvirt/**/test.monitor" rw, "/var/run/libvirt/**/test.pid" rwk, "/home/jamespage/vms/test.qcow2" rw, "/dev/sr0" r, # don't audit writes to readonly files deny "/dev/sr0" w,
No apparmor messages in kern.log, and no impact on functionality.
I've been unable to re-produce this issue on either Lucid or Maverick although they do exhibit different behaviour.
test.qcow2 -> test_base.qcow2 -> base/lenny_ vase.qcow2 (sym link to lenny.qcow2)
Lucid apparmor profile:
"/var/ log/libvirt/ **/test. log" w, lib/libvirt/ **/test. monitor" rw, run/libvirt/ **/test. pid" rwk, jamespage/ vms/test_ base.qcow2" rw, jamespage/ vms/base/ lenny.qcow2" rw, jamespage/ vms/test. qcow2" rw, jamespage/ reference/ isos/ubuntu- server/ maverick- server- i386.iso" r, jamespage/ reference/ isos/ubuntu- server/ maverick- server- i386.iso" w,
"/var/
"/var/
"/home/
"/home/
"/home/
"/home/
# don't audit writes to readonly files
deny "/home/
Maverick apparmor profile:
"/var/ log/libvirt/ **/test. log" w, lib/libvirt/ **/test. monitor" rw, run/libvirt/ **/test. pid" rwk, jamespage/ vms/test. qcow2" rw,
"/var/
"/var/
"/home/
"/dev/sr0" r,
# don't audit writes to readonly files
deny "/dev/sr0" w,
No apparmor messages in kern.log, and no impact on functionality.