registry team mailing list archive

Thread
Date

[Bug 649259] Re: insufficient apparmor rights for sound

To: registry@xxxxxxxxxxxxxxxxxxx
From: Jamie Strandboge <jamie@xxxxxxxxxx>
Date: Mon, 27 Sep 2010 20:15:21 -0000
Reply-to: Bug 649259 <649259@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

This is upstream bug https://bugzilla.redhat.com/show_bug.cgi?id=508317.
Upstream has decided to not enable sound via the security drivers at
this time, but it may change in the future.

As a workaround, you can either adjust the apparmor profile for the individual machine in /etc/apparmor.d/libvirt/libvirt-<uuid> or adjust the apparmor libvirt abstraction in /etc/apparmor.d/abstractions/libvirt-qemu for all virtual machines to have access to the device. Based on the above, it looks like you would add:
  owner /var/lib/libvirt/.pulse-cookie rw,
  owner /proc/[0-9]*/fd/ r,
  owner /proc/[0-9]*/fd/* r,
  /usr/bin/pulseaudio PUx,

Of course, this allows unlimited access to pulseaudio. It would be
better to define a child profile for pulseaudio that was restricted and
use Pix instead of PUx.

** Changed in: libvirt (Ubuntu)
   Importance: Wishlist => Medium

-- 
insufficient apparmor rights for sound
https://bugs.launchpad.net/bugs/649259
You received this bug notification because you are a member of Registry
Administrators, which is the registrant for Fedora.