1. Upgrade to the version in proposed worked fine without issues.
2. static test root@e:~# grep qemu_bridge_helper /etc/apparmor.d/usr.sbin.libvirtd unix (send, receive) type=stream addr=none peer=(label=/usr/sbin/libvirtd//qemu_bridge_helper), signal (send) set=("term") peer=/usr/sbin/libvirtd//qemu_bridge_helper, /usr/{lib,lib64,lib/qemu,libexec}/qemu-bridge-helper Cx -> qemu_bridge_helper, profile qemu_bridge_helper { post: root@e:~# grep qemu_bridge_helper /etc/apparmor.d/usr.sbin.libvirtd unix (send, receive) type=stream addr=none peer=(label=libvirtd//qemu_bridge_helper), signal (send) set=("term") peer=libvirtd//qemu_bridge_helper, /usr/{lib,lib64,lib/qemu,libexec}/qemu-bridge-helper Cx -> qemu_bridge_helper, profile qemu_bridge_helper { => good
3. dynamic test is no more triggering the reported apparmor denials.
=> verified
1. Upgrade to the version in proposed worked fine without issues.
2. static test d/usr.sbin. libvirtd /usr/sbin/ libvirtd/ /qemu_bridge_ helper) , sbin/libvirtd/ /qemu_bridge_ helper, {lib,lib64, lib/qemu, libexec} /qemu-bridge- helper Cx -> qemu_bridge_helper, d/usr.sbin. libvirtd libvirtd/ /qemu_bridge_ helper) , /qemu_bridge_ helper, {lib,lib64, lib/qemu, libexec} /qemu-bridge- helper Cx -> qemu_bridge_helper,
root@e:~# grep qemu_bridge_helper /etc/apparmor.
unix (send, receive) type=stream addr=none peer=(label=
signal (send) set=("term") peer=/usr/
/usr/
profile qemu_bridge_helper {
post:
root@e:~# grep qemu_bridge_helper /etc/apparmor.
unix (send, receive) type=stream addr=none peer=(label=
signal (send) set=("term") peer=libvirtd/
/usr/
profile qemu_bridge_helper {
=> good
3. dynamic test is no more triggering the reported apparmor denials.
=> verified