** Description changed: + ========================================= + SRU Justification + Impact: cannot start vms on nfs mounted disk images + Testcase: set up libvirt managed nfs mount, try to start a vm on it. + Fix: add 'network ipv6' permission to virt-aa-helper's apparmor policy. + Regression potential: this only adds permission to use 'ipv6', alongside the + existing support for 'ipv4'. There should be no regressions. + ========================================= + If I attempt to start a VM with one of its disk images on a libvirt managed NFS mount, it fails: Oct 30 15:30:56 athens kernel: [545232.917662] audit: type=1400 audit(1446233456.718:81): apparmor="DENIED" operation="sendmsg" profile="/usr/lib/libvirt/virt-aa-helper" pid=13760 comm="virt-aa- helper" laddr=fd60:e0:a0f4:121::8 lport=757 faddr=fd60:e0:a0f4:121::4 fport=2049 family="inet6" sock_type="stream" protocol=6
-- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1511830 Title: apparmor denies VM startup when image is network mounted To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1511830/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
