[pkg-apparmor] Bug#887163: libvirt: guest not shutting down w/apparmor enabled

solitone solitone at mail.com
Sun Jan 14 17:31:11 UTC 2018 

Package: apparmor
Version: 2.11.0-3
Severity: important

Dear Maintainer,

I have a windows 10 guest running in libvirt. The hypervisor is KVM.

When apparmor is enabled, the guest does not shut down correctly,
but remains in the "shutting down" state forever.

-- Relevant logs:
Jan 14 17:40:39 kernel: audit: type=1400 audit(1515948039.168:45): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="unconfined"
Jan 14 17:40:39 kernel: audit: type=1400 audit(1515948039.168:46): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="unconfined"
Jan 14 17:40:39 kernel: audit: type=1400 audit(1515948039.168:47): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="unconfined"
Jan 14 17:40:46 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
Jan 14 17:40:46 kernel: tun: Universal TUN/TAP device driver, 1.6
Jan 14 17:40:46 kernel: virbr0: port 1(virbr0-nic) entered blocking state
Jan 14 17:40:46 kernel: virbr0: port 1(virbr0-nic) entered disabled state
Jan 14 17:40:46 kernel: device virbr0-nic entered promiscuous mode
Jan 14 17:40:47 kernel: nf_conntrack version 0.5.0 (65536 buckets, 262144 max)
Jan 14 17:40:47 kernel: virbr0: port 1(virbr0-nic) entered blocking state
Jan 14 17:40:47 kernel: virbr0: port 1(virbr0-nic) entered listening state
Jan 14 17:40:47 kernel: virbr0: port 1(virbr0-nic) entered disabled state
Jan 14 17:40:58 kernel: audit: type=1400 audit(1515948058.301:48): apparmor="STATUS" operation="profile_load" profile="unconfined" name="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56" pid=3918 comm="apparmor_parser"
Jan 14 17:41:27 kernel: audit: type=1400 audit(1515948087.954:49): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56" pid=3984 comm="apparmor_parser"
Jan 14 17:41:28 kernel: virbr0: port 2(vnet0) entered blocking state
Jan 14 17:41:28 kernel: virbr0: port 2(vnet0) entered disabled state
Jan 14 17:41:28 kernel: device vnet0 entered promiscuous mode
Jan 14 17:41:28 kernel: virbr0: port 2(vnet0) entered blocking state
Jan 14 17:41:28 kernel: virbr0: port 2(vnet0) entered listening state
Jan 14 17:41:28 kernel: audit: type=1400 audit(1515948088.222:50): apparmor="STATUS" operation="profile_replace" info="same as current profile, skipping" profile="unconfined" name="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56" pid=4016 comm="apparmor_parser"
Jan 14 17:41:28 kernel: audit: type=1400 audit(1515948088.266:51): apparmor="DENIED" operation="open" profile="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56" name="/sys/devices/system/node/" pid=4048 comm="qemu-system-x86" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jan 14 17:41:28 kernel: audit: type=1400 audit(1515948088.266:52): apparmor="DENIED" operation="open" profile="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56" name="/sys/devices/system/cpu/" pid=4048 comm="qemu-system-x86" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jan 14 17:41:28 kernel: audit: type=1400 audit(1515948088.334:53): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:41:28 kernel: audit: type=1400 audit(1515948088.334:54): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:41:28 kernel: audit: type=1400 audit(1515948088.390:55): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:41:28 kernel: audit: type=1400 audit(1515948088.390:56): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:41:30 kernel: virbr0: port 2(vnet0) entered learning state
Jan 14 17:41:30 kernel: audit: type=1400 audit(1515948090.114:57): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:41:30 kernel: audit: type=1400 audit(1515948090.114:58): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:41:32 kernel: virbr0: port 2(vnet0) entered forwarding state
Jan 14 17:41:32 kernel: virbr0: topology change detected, propagating
Jan 14 17:41:33 kernel: audit: type=1400 audit(1515948093.118:59): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:41:33 kernel: audit: type=1400 audit(1515948093.118:60): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:41:36 kernel: audit: type=1400 audit(1515948096.119:61): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:41:36 kernel: audit: type=1400 audit(1515948096.119:62): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:41:39 kernel: audit: type=1400 audit(1515948099.123:63): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:41:39 kernel: audit: type=1400 audit(1515948099.123:64): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:41:42 kernel: audit: type=1400 audit(1515948102.123:65): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:41:42 kernel: audit: type=1400 audit(1515948102.123:66): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:41:45 kernel: audit: type=1400 audit(1515948105.123:67): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:41:45 kernel: audit: type=1400 audit(1515948105.123:68): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:41:48 kernel: audit: type=1400 audit(1515948108.123:69): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:41:48 kernel: audit: type=1400 audit(1515948108.123:70): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:41:51 kernel: audit: type=1400 audit(1515948111.123:71): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:41:51 kernel: audit: type=1400 audit(1515948111.123:72): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:41:54 kernel: audit: type=1400 audit(1515948114.127:73): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:41:54 kernel: audit: type=1400 audit(1515948114.127:74): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:41:57 kernel: audit: type=1400 audit(1515948117.127:75): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:41:57 kernel: audit: type=1400 audit(1515948117.127:76): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:00 kernel: audit: type=1400 audit(1515948120.123:77): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:00 kernel: audit: type=1400 audit(1515948120.123:78): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:03 kernel: audit: type=1400 audit(1515948123.123:79): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:03 kernel: audit: type=1400 audit(1515948123.123:80): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:06 kernel: audit: type=1400 audit(1515948126.123:81): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:06 kernel: audit: type=1400 audit(1515948126.123:82): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:09 kernel: audit: type=1400 audit(1515948129.124:83): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:09 kernel: audit: type=1400 audit(1515948129.124:84): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:12 kernel: audit: type=1400 audit(1515948132.124:85): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:12 kernel: audit: type=1400 audit(1515948132.124:86): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:15 kernel: audit: type=1400 audit(1515948135.128:87): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:15 kernel: audit: type=1400 audit(1515948135.128:88): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:18 kernel: audit: type=1400 audit(1515948138.128:89): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:18 kernel: audit: type=1400 audit(1515948138.128:90): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:21 kernel: audit: type=1400 audit(1515948141.128:91): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:21 kernel: audit: type=1400 audit(1515948141.128:92): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:24 kernel: audit: type=1400 audit(1515948144.128:93): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:24 kernel: audit: type=1400 audit(1515948144.128:94): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:27 kernel: audit: type=1400 audit(1515948147.128:95): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:27 kernel: audit: type=1400 audit(1515948147.128:96): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:27 kernel: audit: type=1400 audit(1515948147.468:97): apparmor="DENIED" operation="signal" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="send" denied_mask="send" signal=term peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:27 kernel: audit: type=1400 audit(1515948147.468:98): apparmor="DENIED" operation="signal" profile="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56" pid=768 comm="libvirtd" requested_mask="receive" denied_mask="receive" signal=term peer="/usr/sbin/libvirtd"
Jan 14 17:42:27 kernel: audit: type=1400 audit(1515948147.484:99): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:27 kernel: audit: type=1400 audit(1515948147.484:100): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:30 kernel: audit: type=1400 audit(1515948150.128:101): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:30 kernel: audit: type=1400 audit(1515948150.128:102): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:33 kernel: audit: type=1400 audit(1515948153.132:103): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:33 kernel: audit: type=1400 audit(1515948153.132:104): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:36 kernel: audit: type=1400 audit(1515948156.136:105): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:36 kernel: audit: type=1400 audit(1515948156.136:106): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:39 kernel: audit: type=1400 audit(1515948159.132:107): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:39 kernel: audit: type=1400 audit(1515948159.132:108): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:42 kernel: audit: type=1400 audit(1515948162.136:109): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:42 kernel: audit: type=1400 audit(1515948162.136:110): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:45 kernel: audit: type=1400 audit(1515948165.137:111): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:45 kernel: audit: type=1400 audit(1515948165.137:112): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:48 kernel: audit: type=1400 audit(1515948168.137:113): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:48 kernel: audit: type=1400 audit(1515948168.137:114): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:51 kernel: audit: type=1400 audit(1515948171.141:115): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:51 kernel: audit: type=1400 audit(1515948171.141:116): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:54 kernel: audit: type=1400 audit(1515948174.141:117): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"
Jan 14 17:42:54 kernel: audit: type=1400 audit(1515948174.141:118): apparmor="DENIED" operation="ptrace" profile="/usr/sbin/libvirtd" pid=768 comm="libvirtd" requested_mask="trace" denied_mask="trace" peer="libvirt-86d03398-41ea-4eb6-a6ea-d2a2986a6a56"



-- System Information:
Debian Release: 9.3
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.14.0-0.bpo.2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE=en_GB (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages apparmor depends on:
ii  debconf [debconf-2.0]  1.5.61
ii  init-system-helpers    1.48
ii  libapparmor-perl       2.11.0-3
ii  libc6                  2.24-11+deb9u1
ii  lsb-base               9.20161125
ii  python3                3.5.3-1

apparmor recommends no packages.

Versions of packages apparmor suggests:
pn  apparmor-profiles        <none>
pn  apparmor-profiles-extra  <none>
pn  apparmor-utils           <none>

-- debconf information:
  apparmor/homedirs:

More information about the pkg-apparmor-team mailing list