Ubuntu
libvirt package

  1. Maverick (10.10)
  2. Bug #632696
  3. Comment #20

Comment 20 for bug 632696

Revision history for this message
Serge Hallyn (serge-hallyn) wrote : Re: [Bug 632696] Re: libvirt won't start a VM with serial or console when apparmor is enabled

Quoting Jamie Strandboge (<email address hidden>):
> We can create a child profile for pt_chown so only it would get
> cap_fowner. Can you try the following in /etc/apparmor.d/abstractions
> /libvirt-qemu:
>
> owner @{PROC}/[0-9]*/fd/ r,
> owner @{PROC}/[0-9]*/fd/3 r,
> /usr/lib/pt_chown cix -> libvirt_pt_chown,
>
> profile libvirt_pt_chown {
> capability fowner,
> }

I had rebooted (no choice, having to reboot frequently). This time,
even before adding this ruleset, I could start the hosts.

So either the recipe:

 /etc/init.d/apparmor restart
 restart libvirt-bin

does not suffice to clear out the rules, or this is a very funky
random bug that only happens sometimes. I'll try to get some time
dedicated to testing this this afternoon.