Comment 14 for bug 1655111

Revision history for this message
Christian Ehrhardt  (paelzer) wrote :

1. Upgrade to the version in proposed worked fine without issues.

2. static test
root@e:~# grep qemu_bridge_helper /etc/apparmor.d/usr.sbin.libvirtd
  unix (send, receive) type=stream addr=none peer=(label=/usr/sbin/libvirtd//qemu_bridge_helper),
  signal (send) set=("term") peer=/usr/sbin/libvirtd//qemu_bridge_helper,
  /usr/{lib,lib64,lib/qemu,libexec}/qemu-bridge-helper Cx -> qemu_bridge_helper,
  profile qemu_bridge_helper {
post:
root@e:~# grep qemu_bridge_helper /etc/apparmor.d/usr.sbin.libvirtd
  unix (send, receive) type=stream addr=none peer=(label=libvirtd//qemu_bridge_helper),
  signal (send) set=("term") peer=libvirtd//qemu_bridge_helper,
  /usr/{lib,lib64,lib/qemu,libexec}/qemu-bridge-helper Cx -> qemu_bridge_helper,
  profile qemu_bridge_helper {
=> good

3. dynamic test is no more triggering the reported apparmor denials.

=> verified