| 2015-06-19 15:29:07 |
Andrey Korolyov |
bug |
|
|
added bug |
| 2015-06-19 15:33:11 |
Andrey Korolyov |
summary |
Custom rom and socket locations is not allowed by aa-helper |
Custom rom and socket locations are not allowed by aa-helper |
|
| 2015-06-19 16:04:49 |
Andrey Korolyov |
summary |
Custom rom and socket locations are not allowed by aa-helper |
Custom rom location are not allowed by aa-helper |
|
| 2015-06-19 16:05:02 |
Andrey Korolyov |
description |
Please find that the currently the code in the aa-helper forbids rare, though possible config type:
<os>
...
<loader>/usr/share/seabios/bios.bin-1.7.5</loader>
...
</os>
internal error: Child process (/usr/lib/libvirt/virt-aa-helper -p 0 -r -u libvirt-866ba0e5-405e-442c-8544-fea8171a65c5) unexpected exit status 1: Failed to read classid file: No Access
virt-aa-helper: warning: path does not exist, skipping file type checks
virt-aa-helper: error: /usr/share/seabios/bios.bin-1.7.5
the same goes for virtio-serial socket, though it can be worked out just in the policy file instead of code patching:
<channel type='unix'>
<source mode='bind' path='/var/lib/libvirt/qemu/vmtest.sock'/>
<target type='virtio' name='org.qemu.guest_agent.0'/>
<address type='virtio-serial' controller='0' bus='0' port='1'/>
</channel>
Also there is a trivial change for reading /etc/ceph/keyring.bin as the Ceph-enabled setups are flooding logs with this forbidden location as well. |
Please find that the currently the code in the aa-helper forbids rare, though possible config type:
<os>
...
<loader>/usr/share/seabios/bios.bin-1.7.5</loader>
...
</os>
internal error: Child process (/usr/lib/libvirt/virt-aa-helper -p 0 -r -u libvirt-866ba0e5-405e-442c-8544-fea8171a65c5) unexpected exit status 1: Failed to read classid file: No Access
virt-aa-helper: warning: path does not exist, skipping file type checks
virt-aa-helper: error: /usr/share/seabios/bios.bin-1.7.5
Also there is a trivial change for reading /etc/ceph/keyring.bin as the Ceph-enabled setups are flooding logs with this forbidden location as well. |
|
| 2015-07-03 18:23:02 |
Serge Hallyn |
libvirt (Ubuntu): status |
New |
Triaged |
|
| 2015-07-03 18:23:05 |
Serge Hallyn |
libvirt (Ubuntu): importance |
Undecided |
High |
|
| 2015-07-03 18:33:20 |
Andrey Korolyov |
summary |
Custom rom location are not allowed by aa-helper |
Custom rom location is not allowed by aa-helper |
|
| 2015-09-04 22:16:00 |
Serge Hallyn |
libvirt (Ubuntu): importance |
High |
Medium |
|
