Comment 0 for bug 901272

Description: Ubuntu 11.10
Release : 11.10

When setting up VncTLS according to the official Libvirt documentation, only one certificate for libvirt/libvirt-vnc is used. The document indicates to use the following directories :

 /etc/pki/CA
 /etc/pki/libvirt
 /etc/pki/libvirt/private

in order to manage the certificates used by libvirt-vnc.

These directories should be added to the libvirt AppArmor profile provided by Ubuntu.

Reproducible: 100%

Workaround:

Manually modify the /etc/apparmor.d/abstractions/libvirt-qemu profile

Business concern:

This would affect anybody trying to use the official documentation to enable qemu-vnc

Request:

Modify the libvirt-qemu profile

ProblemType: Bug
DistroRelease: Ubuntu 11.10
Package: libvirt-bin-0.9.2-4ubuntu15.1
Uname: Linux 3.0.0-13-server x86_64
Architecture: N/A