[libvirt] [PATCH v2] AppArmor: allow virt-aa-helper read access to Nova's qcow backing files.

Michal Prívozník mprivozn at redhat.com
Mon Jun 11 14:36:15 UTC 2018


On 06/11/2018 01:50 PM, intrigeri wrote:
> <snip/>
> 0001-AppArmor-allow-virt-aa-helper-read-access-to-Nova-s-.patch
> 
> 
>>From f4ea2da3ddeb275b3bd08b33ebe858dd6f7f274f Mon Sep 17 00:00:00 2001
> From: intrigeri <intrigeri+libvirt at boum.org>
> Date: Sat, 9 Jun 2018 19:26:26 +0000
> Subject: [PATCH] AppArmor: allow virt-aa-helper read access to Nova's qcow
>  backing files.
> 
> As reported on https://bugs.debian.org/892431, without this rule, when launching
> a QEMU KVM instance, an error occurs immediately upon launching the QEMU
> process such as:
> 
>   Could not open backing file: Could not open
>   '/var/lib/nova/instances/_base/affe96668a4c64ef380ff1c71b4caec17039080e':
>   Permission denied
> 
> The other instance disk images are already covered by the existing rule:
> 
>   /**/disk{,.*} r
> 
> Signed-off-by: intrigeri <intrigeri at boum.org>

I'm sorry but as stated earlier, this should be your real name not a
nickname. Also, we don't really thread next versions of a patch under
the previous ones.

Michal




More information about the libvir-list mailing list