It is interesting that it seems to do so only once.
So if a qemu process is started then
1. the first attach like:
virsh attach-device artful-pidstat hot-add-usb.xml
Triggers the denies:
2. but subsequent attach-device calls just fail without new denies
That explains to some extend why in some cases people don't see the deny.
It happened in the past but is cached.
It is also important to consider that when debugging as we will hit it
only once.
The first step is to understand what/why qemu actually reads those.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1552241
Title:
libvirt-bin apparmor settings for usb host device
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1552241/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
