touch-packages team mailing list archive

Thread
Date

[Bug 815883] Re: libvirt cannot start dnsmasq when using apparmor profile

To: touch-packages@xxxxxxxxxxxxxxxxxxx
From: M$$Ger <mssg3r@xxxxxxxxx>
Date: Sun, 28 Sep 2014 13:55:01 -0000
Reply-to: Bug 815883 <815883@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

virsh net-start default

IPv6: ADDRCONF(NETDEV_UP): virbr0: link is not ready

type=1400 audit(1411912195.731:2159): apparmor="DENIED" operation="open"
profile="/usr/sbin/dnsmasq" name="/var/lib/libvirt/dnsmasq/default.conf"
pid=11512 comm="dnsmasq" requested_mask="r" denied_mask="r" fsuid=0
ouid=126

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/815883

Title:
  libvirt cannot start dnsmasq when using apparmor profile

Status in “apparmor” package in Ubuntu:
  Fix Released

Bug description:
  After upgrading to Oneiric, I get the following dnsmasq denial when libvirt starts:
  type=AVC msg=audit(1311512554.401:96): apparmor="DENIED" operation="mknod" parent=1689 profile="/usr/sbin/dnsmasq" name="/var/lib/libvirt/dnsmasq/default.leases" pid=10701 comm="dnsmasq" requested_mask="c" denied_mask="c" fsuid=0 ouid=0

  The following rule fixes it:
    /var/lib/libvirt/dnsmasq/*.leases rw,

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/815883/+subscriptions