| 2015-10-30 19:38:56 |
Kevin Otte |
bug |
|
|
added bug |
| 2015-11-02 15:32:25 |
Serge Hallyn |
bug task added |
|
apparmor (Ubuntu) |
|
| 2015-11-02 16:46:12 |
Jamie Strandboge |
bug task deleted |
apparmor (Ubuntu) |
|
|
| 2015-11-02 19:13:54 |
Launchpad Janitor |
libvirt (Ubuntu): status |
New |
Fix Released |
|
| 2015-11-04 16:50:02 |
Serge Hallyn |
nominated for series |
|
Ubuntu Trusty |
|
| 2015-11-04 16:50:02 |
Serge Hallyn |
bug task added |
|
libvirt (Ubuntu Trusty) |
|
| 2015-11-04 16:50:02 |
Serge Hallyn |
nominated for series |
|
Ubuntu Wily |
|
| 2015-11-04 16:50:02 |
Serge Hallyn |
bug task added |
|
libvirt (Ubuntu Wily) |
|
| 2015-11-04 16:50:02 |
Serge Hallyn |
nominated for series |
|
Ubuntu Vivid |
|
| 2015-11-04 16:50:02 |
Serge Hallyn |
bug task added |
|
libvirt (Ubuntu Vivid) |
|
| 2015-11-04 17:04:18 |
Serge Hallyn |
libvirt (Ubuntu): importance |
Undecided |
High |
|
| 2015-11-04 17:04:20 |
Serge Hallyn |
libvirt (Ubuntu Trusty): importance |
Undecided |
High |
|
| 2015-11-04 17:04:23 |
Serge Hallyn |
libvirt (Ubuntu Vivid): importance |
Undecided |
High |
|
| 2015-11-04 17:04:25 |
Serge Hallyn |
libvirt (Ubuntu Wily): importance |
Undecided |
High |
|
| 2015-11-04 17:20:25 |
Serge Hallyn |
description |
If I attempt to start a VM with one of its disk images on a libvirt managed NFS mount, it fails:
Oct 30 15:30:56 athens kernel: [545232.917662] audit: type=1400 audit(1446233456.718:81): apparmor="DENIED" operation="sendmsg" profile="/usr/lib/libvirt/virt-aa-helper" pid=13760 comm="virt-aa-helper" laddr=fd60:e0:a0f4:121::8 lport=757 faddr=fd60:e0:a0f4:121::4 fport=2049 family="inet6" sock_type="stream" protocol=6 |
=========================================
SRU Justification
Impact: cannot start vms on nfs mounted disk images
Testcase: set up libvirt managed nfs mount, try to start a vm on it.
Fix: add 'network ipv6' permission to virt-aa-helper's apparmor policy.
Regression potential: this only adds permission to use 'ipv6', alongside the
existing support for 'ipv4'. There should be no regressions.
=========================================
If I attempt to start a VM with one of its disk images on a libvirt managed NFS mount, it fails:
Oct 30 15:30:56 athens kernel: [545232.917662] audit: type=1400 audit(1446233456.718:81): apparmor="DENIED" operation="sendmsg" profile="/usr/lib/libvirt/virt-aa-helper" pid=13760 comm="virt-aa-helper" laddr=fd60:e0:a0f4:121::8 lport=757 faddr=fd60:e0:a0f4:121::4 fport=2049 family="inet6" sock_type="stream" protocol=6 |
|
| 2015-11-04 17:20:29 |
Serge Hallyn |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
| 2015-11-12 17:43:38 |
Brian Murray |
libvirt (Ubuntu Wily): status |
New |
Fix Committed |
|
| 2015-11-12 17:43:40 |
Brian Murray |
bug |
|
|
added subscriber SRU Verification |
| 2015-11-12 17:43:43 |
Brian Murray |
tags |
|
verification-needed |
|
| 2015-11-12 17:45:38 |
Brian Murray |
libvirt (Ubuntu Vivid): status |
New |
Fix Committed |
|
| 2015-11-27 07:20:42 |
Sebastien Bacher |
tags |
verification-needed |
verification-done |
|
| 2015-12-02 18:44:19 |
Launchpad Janitor |
libvirt (Ubuntu Vivid): status |
Fix Committed |
Fix Released |
|
| 2015-12-02 18:44:24 |
Chris J Arges |
removed subscriber Ubuntu Stable Release Updates Team |
|
|
|
| 2015-12-02 18:44:39 |
Launchpad Janitor |
libvirt (Ubuntu Wily): status |
Fix Committed |
Fix Released |
|
| 2016-03-03 21:12:29 |
Brian Murray |
libvirt (Ubuntu Trusty): status |
New |
Fix Committed |
|
| 2016-03-03 21:12:33 |
Brian Murray |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
| 2016-03-03 21:12:37 |
Brian Murray |
tags |
verification-done |
|
|
| 2016-03-03 21:12:39 |
Brian Murray |
tags |
|
verification-needed |
|
| 2016-07-05 19:30:29 |
Ubuntu Foundations Team Bug Bot |
tags |
verification-needed |
removal-candidate verification-needed |
|
| 2016-11-21 16:23:46 |
Martin Pitt |
libvirt (Ubuntu Trusty): status |
Fix Committed |
Won't Fix |
|
| 2016-11-21 16:23:56 |
Martin Pitt |
removed subscriber Ubuntu Stable Release Updates Team |
|
|
|
| 2016-11-21 16:23:57 |
Martin Pitt |
tags |
removal-candidate verification-needed |
removal-candidate |
|
