[Pkg-libvirt-maintainers] Bug#883574: Bug#883574: libvirt-daemon-system: fails to start any VM with apparmor enforced

[Guido Günther]

control: tags -1 +moreinfo
control: retitle -1 libvirt-daemon-system: fails to start VM with configuration <iwonttell> with apparmor enforced

Hi,
On Tue, Dec 05, 2017 at 12:19:43PM +0100, Kjö Hansi Glaz wrote:
> Package: libvirt-daemon-system
> Version: 3.9.0-1
> Severity: normal
> 
> Dear Maintainer,
> 
>    * What led up to the situation?
> 
> Apparmor is in enforce mode.
> 
>    * What exactly did you do (or not do) that was effective (or
>      ineffective)?
> 
> Try to start any VM.
> 
>    * What was the outcome of this action?
> 
> I get the following error:
> 
>    libvirtError: internal error: Process exited prior to exec: libvirt:
>    error : Failed to switch root mount into slave mode: Permission denied
> 
> Please note that I don't see any line in the journal.
> 
>    * What outcome did you expect instead?
> 
> The VM to start. Setting apparmor to complain mode (aa-complain
> usr.sbin.libvirtd) worksaround the issue

Please provide logging output and steps to reproduce, kernel version and
what else might be needed to reproduce the problem. Ask yourself what
makes your installation different from the ones that work with apparmor
enabled.

Cheers,
 -- Guido