Hi Michal, On Fri, 02 Oct 2026 11:22:04 +0200 Michal Humpula <[email protected]> wrote:
> Seems like after upgrade from 0.0~git20260728.f8df3f1-1 to > 0.0~git20260925.df90211-1 I'm no longer able to use passt with qemu. The > process ends up with error > > ``` > Could not open /proc/49155/uid_map: Permission denied > Couldn't configure user mappings > ``` > > I'm also getting in syslog > ``` > kernel: audit: type=1400 audit(1790930196.465:152): apparmor="DENIED" > operation="open" class="file" profile="passt" name="/proc/49155/uid_map" > pid=49152 comm="passt.avx2" requested_mask="w" denied_mask="w" fsuid=1000 > ouid=1000 > ``` > > Looks like the commit 7bf1595c924271b74e924426765fa0b5524e4e57 might have > changed the behavior and now it attempts to write to files the apparamor > profile does allow only reading. Ouch. Thanks for reporting this. It looks like I updated AppArmor files manually on the setup I used for my local tests and passt kept working with the change, but I didn't post or release the changes. :( This needs the AppArmor equivalent of: https://archives.passt.top/passt-dev/[email protected]/#Z31contrib:selinux:passt.te ...fixing that right now. -- Stefano
