[Pkg-libvirt-maintainers] Bug#1030684: libvirtd: apparmor DENIED for /etc/ssl/openssl.cnf results in VM paused with IO error

[Arturo Borrero Gonzalez]

control: retitle -1 libvirtd: apparmor DENIED for /etc/ssl/openssl.cnf

On Mon, 06 Feb 2023 14:29:42 +0100 Arturo Borrero Gonzalez <arturo at debian.org> 
wrote:>
> When checking the `dmesg` utility, I found and apparmor DENIED entry:
> 
> audit: type=1400 audit(1675687963.952:121): apparmor="DENIED" operation="open" profile="libvirt-ff5c79a6-f53b-473b-b181-f1148e861bde" name="/etc/ssl/openssl.cnf" pid=40557 comm="qemu-system-x86" requested_mask="r" denied_mask="r" fsuid=64055 ouid=0
> 
> I've tested several VMs and they all go into this IO error state with similar apparmor messages after a while.
> 

Update: the VM going into pause seems unrelated to the apparmor DENIED 
situation. I had a full storage pool.

The apparmor DENIED error is still happening, but I'm unclear of the effects it has.