1. Applying that custom rule works 2. On 22.10 it's
root@ubuntu:~# cat /etc/apparmor.d/libvirt/libvirt-5ed35ab0-afe6-4d5b-b1dd-f249242260a6.files # DO NOT EDIT THIS FILE DIRECTLY. IT IS MANAGED BY LIBVIRT. "/var/log/libvirt/**/subVmTest1.log" w, "/var/lib/libvirt/qemu/domain-subVmTest1/monitor.sock" rw, "/var/lib/libvirt/qemu/domain-1-subVmTest1/*" rw, "/run/libvirt/**/subVmTest1.pid" rwk, "/run/libvirt/**/*.tunnelmigrate.dest.subVmTest1" rw, "/var/lib/libvirt/images/subVmTest1-2.img" rwk, "/var/log/libvirt/console-subVmTest1.log" rw, "/var/log/libvirt/console-subVmTest1.log" rw, "/dev/vhost-net" rw, "/var/lib/libvirt/qemu/domain-1-subVmTest1/{,**}" rwk, "/var/lib/libvirt/qemu/channel/target/domain-1-subVmTest1/{,**}" rwk, "/var/lib/libvirt/qemu/domain-1-subVmTest1/master-key.aes" rwk, "/dev/net/tun" rwk,
Working version:
root@ubuntu:~# cat /etc/apparmor.d/libvirt/libvirt-a70443f4-ff95-480a-ad89-370cc5fce495.files # DO NOT EDIT THIS FILE DIRECTLY. IT IS MANAGED BY LIBVIRT. "/var/log/libvirt/**/subVmTest1.log" w, "/var/lib/libvirt/qemu/domain-subVmTest1/monitor.sock" rw, "/var/lib/libvirt/qemu/domain-1-subVmTest1/*" rw, "/run/libvirt/**/subVmTest1.pid" rwk, "/run/libvirt/**/*.tunnelmigrate.dest.subVmTest1" rw, "/var/lib/libvirt/images/subVmTest1-2.img" rwk, "/var/log/libvirt/console-subVmTest1.log" rw, "/var/log/libvirt/console-subVmTest1.log" rw, "/var/lib/libvirt/qemu/domain-1-subVmTest1/{,**}" rwk, "/var/lib/libvirt/qemu/channel/target/domain-1-subVmTest1/{,**}" rwk, "/var/lib/libvirt/qemu/domain-1-subVmTest1/master-key.aes" rwk, "/dev/net/tun" rwk,
1. Applying that custom rule works
2. On 22.10 it's
root@ubuntu:~# cat /etc/apparmor. d/libvirt/ libvirt- 5ed35ab0- afe6-4d5b- b1dd-f249242260 a6.files log/libvirt/ **/subVmTest1. log" w, lib/libvirt/ qemu/domain- subVmTest1/ monitor. sock" rw, lib/libvirt/ qemu/domain- 1-subVmTest1/ *" rw, libvirt/ **/subVmTest1. pid" rwk, libvirt/ **/*.tunnelmigr ate.dest. subVmTest1" rw, lib/libvirt/ images/ subVmTest1- 2.img" rwk, log/libvirt/ console- subVmTest1. log" rw, log/libvirt/ console- subVmTest1. log" rw, lib/libvirt/ qemu/domain- 1-subVmTest1/ {,**}" rwk, lib/libvirt/ qemu/channel/ target/ domain- 1-subVmTest1/ {,**}" rwk, lib/libvirt/ qemu/domain- 1-subVmTest1/ master- key.aes" rwk,
# DO NOT EDIT THIS FILE DIRECTLY. IT IS MANAGED BY LIBVIRT.
"/var/
"/var/
"/var/
"/run/
"/run/
"/var/
"/var/
"/var/
"/dev/vhost-net" rw,
"/var/
"/var/
"/var/
"/dev/net/tun" rwk,
Working version:
root@ubuntu:~# cat /etc/apparmor. d/libvirt/ libvirt- a70443f4- ff95-480a- ad89-370cc5fce4 95.files log/libvirt/ **/subVmTest1. log" w, lib/libvirt/ qemu/domain- subVmTest1/ monitor. sock" rw, lib/libvirt/ qemu/domain- 1-subVmTest1/ *" rw, libvirt/ **/subVmTest1. pid" rwk, libvirt/ **/*.tunnelmigr ate.dest. subVmTest1" rw, lib/libvirt/ images/ subVmTest1- 2.img" rwk, log/libvirt/ console- subVmTest1. log" rw, log/libvirt/ console- subVmTest1. log" rw, lib/libvirt/ qemu/domain- 1-subVmTest1/ {,**}" rwk, lib/libvirt/ qemu/channel/ target/ domain- 1-subVmTest1/ {,**}" rwk, lib/libvirt/ qemu/domain- 1-subVmTest1/ master- key.aes" rwk,
# DO NOT EDIT THIS FILE DIRECTLY. IT IS MANAGED BY LIBVIRT.
"/var/
"/var/
"/var/
"/run/
"/run/
"/var/
"/var/
"/var/
"/var/
"/var/
"/var/
"/dev/net/tun" rwk,