[Pkg-libvirt-maintainers] Bug#743708: Bug#743708: libvirt-bin: AppArmor profile template installed in the wrong place

[Guido Günther]

Hi,
On Sat, Apr 05, 2014 at 02:40:31PM +0200, intrigeri at debian.org wrote:
> Package: libvirt-bin
> Version: 1.2.1-1
> Severity: normal
> 
> Hi,
> 
> libvirt complain that its AppArmor template does not exist:
> 
>   libvirtd[9079]: internal error: template '/etc/apparmor.d/libvirt/TEMPLATE' does not exist
> 
> ... and indeed, the template is installed in
> /etc/apparmor.d/libvirtd/TEMPLATE instead.
> 
> (Once I fix this by hand, AppArmor denies the audit_write capability
> to libvirtd, that apparently needs it. I'll report this separately if
> needed. And once I allow libvirtd to use this capability, I get
> "internal error:  cannot load AppArmor profile
> 'libvirt-6da57234-587c-4119-3c3a-f064574cb3dc'", but I assume this is
> expected until #725144 is resolved.)

Thanks for checking out apparmor support but please don't file
individual bugs until we have apparmor support "officialy" enabled.
Adding your findings to 725144 is very much appreciated though.
Cheers,
 -- Guido

> 
> Cheers,
> 
> -- System Information:
> Debian Release: jessie/sid
>   APT prefers unstable
>   APT policy: (990, 'unstable')
> Architecture: amd64 (x86_64)
> 
> Kernel: Linux 3.13-1-amd64 (SMP w/4 CPU cores)
> Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
> Shell: /bin/sh linked to /bin/dash
> 
> Versions of packages libvirt-bin depends on:
> ii  adduser              3.113+nmu3
> ii  gettext-base         0.18.3.2-1
> ii  init-system-helpers  1.18
> ii  libapparmor1         2.8.0-5+b1
> ii  libaudit1            1:2.3.4-1
> ii  libavahi-client3     0.6.31-4
> ii  libavahi-common3     0.6.31-4
> ii  libblkid1            2.20.1-5.7
> ii  libc6                2.18-4
> ii  libcap-ng0           0.7.3-1+b1
> ii  libdbus-1-3          1.8.0-3
> ii  libdevmapper1.02.1   2:1.02.83-2
> ii  libfuse2             2.9.3-8
> ii  libgcrypt11          1.5.3-4
> ii  libgnutls26          2.12.23-13
> ii  libnetcf1            1:0.2.3-4
> ii  libnl-3-200          3.2.24-1
> ii  libnl-route-3-200    3.2.24-1
> ii  libnuma1             2.0.9~rc5-1
> ii  libparted0debian1    2.3-18
> ii  libpcap0.8           1.5.3-2
> ii  libpciaccess0        0.13.2-1
> ii  librados2            0.72.2-2
> ii  librbd1              0.72.2-2
> ii  libreadline6         6.3-5
> ii  libsasl2-2           2.1.26.dfsg1-9
> ii  libselinux1          2.2.2-1
> ii  libssh2-1            1.4.3-2
> ii  libudev1             204-8
> ii  libvirt0             1.2.1-1
> ii  libxen-4.3           4.3.0-3+b1
> ii  libxenstore3.0       4.3.0-3+b1
> ii  libxml2              2.9.1+dfsg1-3
> ii  libyajl2             2.0.4-4
> ii  logrotate            3.8.7-1
> 
> Versions of packages libvirt-bin recommends:
> ii  bridge-utils    1.5-7
> ii  dmidecode       2.12-2
> ii  dnsmasq-base    2.68-1
> pn  ebtables        <none>
> ii  iproute         1:3.12.0-2
> ii  iptables        1.4.21-1
> ii  libxml2-utils   2.9.1+dfsg1-3
> ii  netcat-openbsd  1.105-7
> ii  parted          2.3-18
> ii  pm-utils        1.4.1-13
> ii  qemu            1.7.0+dfsg-5
> ii  qemu-kvm        1.7.0+dfsg-5
> 
> Versions of packages libvirt-bin suggests:
> ii  apparmor     2.8.0-5+b1
> pn  auditd       <none>
> ii  policykit-1  0.105-4
> pn  radvd        <none>
> ii  systemd      204-8
> ii  systemtap    2.3-1
> 
> --
>   intrigeri
>   | GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc
>   | OTR fingerprint @ https://gaffer.ptitcanardnoir.org/intrigeri/otr.asc
> 
> _______________________________________________
> Pkg-libvirt-maintainers mailing list
> Pkg-libvirt-maintainers at lists.alioth.debian.org
> http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-libvirt-maintainers
>