[Ovirt-devel] yum update broke ovirt

[Justin Clacherty]

Justin Clacherty wrote:
> "Error creating virtual machine: Error: Error creating new domain 
> (virDomainCreate). Subsystem qemu: internal error unable to start 
> guest: bind(unix:/var/run/libvirt/qemu/Services.monitor): Permission 
> denied qemu: could not open monitor device 
> 'unix:/var/run/libvirt/qemu/Services.monitor,server,nowait' in 
> DomainWrap.cpp:ManagementMethod:115"

Don't know what's going on with the "No agent responded within the 
timeout period." problem, but the above error is seen on the node.

 From /var/log/libvirt/qemu/Services.log

LC_ALL=C PATH=/sbin:/usr/sbin:/bin:/usr/bin /usr/bin/qemu-kvm -S -M 
pc-0.11 -m 512 -smp 1 -name Services -uuid 
06c7406b-4bfc-ac52-26de-00723afd688c -monitor 
unix:/var/run/libvirt/qemu/Services.monitor,server,nowait -boot c -drive 
file=/dev/disk/by-id/scsi-149455400000000000000000005000000061080000000d00f,if=ide,index=0,boot=on 
-net nic,macaddr=00:16:3e:0c:db:ac,vlan=0,name=nic.0 -net 
tap,fd=28,vlan=0,name=tap.0 -serial pty -parallel none -usb -vnc 
0.0.0.0:0 -vga cirrus
bind(unix:/var/run/libvirt/qemu/Services.monitor): Permission denied
qemu: could not open monitor device 
'unix:/var/run/libvirt/qemu/Services.monitor,server,nowait'

It appears to be an selinux problem.  From /var/log/audit/audit.log

type=AVC msg=audit(1249356621.775:115): avc:  denied  { create } for  
pid=4611 comm="qemu-kvm" name="Services.monitor" 
scontext=system_u:system_r:svirt_t:s0:c405,c995 
tcontext=system_u:object_r:svirt_var_run_t:s0:c405,c995 tclass=sock_file

Justin.