[Pkg-libvirt-maintainers] Bug#887977: Bug#887977: apparmor denies operation="signal" to libvirtd

Guido Günther agx at sigxcpu.org
Mon Jan 22 09:29:01 UTC 2018


Hi,
On Mon, Jan 22, 2018 at 10:13:09AM +0100, Martin Pitt wrote:
> Package: libvirt-daemon-system
> Version: 3.10.0-1
> Severity: minor
> 
> When operating VMs with libvirt and AppArmor installed, the Cockpit integration
> tests commonly see these denials:
> 
>    audit: type=1400 audit(1516609717.472:41): apparmor="DENIED" operation="signal" profile="/usr/sbin/libvirtd" pid=969 comm="libvirtd" requested_mask="send" denied_mask="send" signal=kill peer="unconfined"'
> 
> This doesn't seem to break actual operations, at least not the ones that we
> use. But the apparmor profile should still be adjusted.

This should be fixed in 4.0. Can you please check and close in this
case?
 -- Guido



More information about the Pkg-libvirt-maintainers mailing list