[Pkg-libvirt-maintainers] Bug#988317: Missing apparmor rule for Ceph

Thomas Goirand zigo at debian.org
Mon May 10 12:39:52 BST 2021


Source: libvirt
Version: 7.0.0-3
Severity: important

Hi,

Using libvirt with OpenStack + Ceph leads to:
Feb  9 08:48:46 pub1-compute-6 kernel: [504499.802457] audit: type=1400 audit(1612860526.903:6409): apparmor="DENIED" operation="open" profile="libvirt-86976887-cdb9-4499-b7c1-cffa827f394a" name="/etc/ceph/ceph.client.openstack.keyring"pid=1746384comm="qemusystem-x86" requested_mask="r" denied_mask="r" fsuid=64055 ouid=0

Please fix the default apparmor profile. It'd be nice if the fix could reach
Bullseye in time.

Cheers,

Thomas Goirand (zigo)



More information about the Pkg-libvirt-maintainers mailing list