[Bug 1655111] Re: LibVirt Apparmor profile has qemu-bridge-helper listed in the wrong directory
I'm using qemu-bridge-helper already for a while. Since updating to
19.10 libvirtd suddenly refused to start my VMs. Turned out to be caused
by apparmor, I found these log messages:
audit: type=1400 audit(1580253669.262:100): apparmor="DENIED"
operation="file_inherit" profile="libvirtd//qemu_bridge_helper" pid=5629
comm="qemu-bridge-hel" family="unix" sock_type="stream" protocol=0
requested_mask="send receive" denied_mask="send receive" addr=none
peer_addr=none peer="libvirtd"
audit: type=1400 audit(1580253669.262:101): apparmor="DENIED"
operation="file_inherit" profile="libvirtd" pid=5629 comm="qemu-bridge-hel"
family="unix" sock_type="stream" protocol=0 requested_mask="send receive"
denied_mask="send receive" addr=none peer_addr=none
peer="libvirtd//qemu_bridge_helper"
audit: type=1400 audit(1580253669.262:102): apparmor="DENIED"
operation="signal" profile="libvirtd" pid=3118 comm="libvirtd"
requested_mask="send" denied_mask="send" signal=term
peer="libvirtd//qemu_bridge_helper"
For me the following change below the issue. I've barely any idea what I'm
doing, never wrote apparmor profiles before. So probably this patch needs a bit
of fine-tuning.
--- usr.sbin.libvirtd-orig 2020-01-29 22:52:27.257908332 +0100
+++ usr.sbin.libvirtd 2020-01-29 22:45:42.358642382 +0100
@@ -62,8 +62,10 @@
signal (send) set=("kill", "term") peer=unconfined,
# For communication/control to qemu-bridge-helper
- unix (send, receive) type=stream addr=none
peer=(label=/usr/sbin/libvirtd//qemu_bridge_helper),
- signal (send) set=("term") peer=/usr/sbin/libvirtd//qemu_bridge_helper,
+ unix (send, receive) type=stream addr=none
peer=(label=libvirtd//qemu_bridge_helper),
+ signal (send) set=("term") peer=libvirtd//qemu_bridge_helper,
# allow connect with openGraphicsFD, direction reversed in newer versions
unix (send, receive) type=stream addr=none
peer=(label=libvirt-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*),
@@ -122,7 +124,8 @@
network inet stream,
# For communication/control from libvirtd
- unix (send, receive) type=stream addr=none peer=(label=/usr/sbin/libvirtd),
+ unix (send, receive) type=stream addr=none peer=(label=libvirtd),
signal (receive) set=("term") peer=/usr/sbin/libvirtd,
signal (receive) set=("term") peer=libvirtd,
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1655111
Title:
LibVirt Apparmor profile has qemu-bridge-helper listed in the wrong
directory
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1655111/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1315562] Re: libnss-winbind should allow installation of the 32 bit libarary in trusty
I've got the same problem. We are using several closed source tools (for FPGA building, code analysis, etc) which are 32-bit and e.g. call getpwuid(). A few segfault because of the returned NULL pointer return value caused by the missing libnss_winbind library. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to samba in Ubuntu. https://bugs.launchpad.net/bugs/1315562 Title: libnss-winbind should allow installation of the 32 bit libarary in trusty To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1315562/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1315562] Re: libnss-winbind should allow installation of the 32 bit libarary in trusty
I've got the same problem. We are using several closed source tools (for FPGA building, code analysis, etc) which are 32-bit and e.g. call getpwuid(). A few segfault because of the returned NULL pointer return value caused by the missing libnss_winbind library. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1315562 Title: libnss-winbind should allow installation of the 32 bit libarary in trusty To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/samba/+bug/1315562/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 600453] Re: [arrandale] [i915] DELL E6510: blank screen on boot (Intel GPU)
I also have a E6510 with these problems (on maverick). I tried the #185 kernel (just installed on maverick) and this solves all the problems. Is there any chance this fixes will be backported to 10.10? Or is it safe to run this kernel (which is meant for Natty)? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/600453 Title: [arrandale] [i915] DELL E6510: blank screen on boot (Intel GPU) -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 399636] Re: [i915gm] karmic 2.6.31-2 and -3 lid closing blacks screen until reboot on thinkpad r52
Idem dito. Dell Inspiron 6400, screen stays off (black) after closing and openening the lid, regardless of power management settings. Screen is restored after a suspend-to-ram/resume cycle. -- [i915gm] karmic 2.6.31-2 and -3 lid closing blacks screen until reboot on thinkpad r52 https://bugs.launchpad.net/bugs/399636 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 258738] Re: intrepid regression: bluetooth services without name in tab Services
Same problem here: 3 services listed, only the last one has a name (Audio service). I messed a little bit with dbus-send: $ dbus-send --system --print-reply --dest=org.bluez /org/bluez/service_audio org.bluez.Service.GetName method return sender=:1.110 - dest=:1.134 reply_serial=2 string Audio service $ dbus-send --system --print-reply --dest=org.bluez /org/bluez/service_headset org.bluez.Service.GetName method return sender=:1.110 - dest=:1.133 reply_serial=2 string Looks like the bug is not in bluetooth-properties. I didn't investigate anything else yet (and i have about zero knowledge about bluez). -- intrepid regression: bluetooth services without name in tab Services https://bugs.launchpad.net/bugs/258738 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
