Public bug reported:
During regular cloud deployment testing we saw this error in the syslog
of the MAAS server syslog. It seems to match #1546674 virt-aa-helper
Apparmor profile missing rules for name resolution but occurs in Bionic.
Nov 15 19:22:58 swoobat kernel: [92142.090367] audit: type=1400
audit(1542309778.814:966): apparmor="DENIED" operation="open"
profile="virt-aa-helper"
name="/var/lib/virt/images/f353c243-96e5-4579-b88e-ca4b6d7289b3" pid=32726
comm="virt-aa-helper" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Nov 15 19:22:58 swoobat kernel: [92142.244937] audit: type=1400
audit(1542309778.970:967): apparmor="STATUS" operation="profile_replace"
profile="unconfined" name="libvirt-481d5eb4-34d3-4a9b-a6c9-020eb3e70e3d"
pid=32733 comm="apparmor_parser"
Nov 15 19:23:07 swoobat kernel: [92150.854769] audit: type=1400
audit(1542309787.578:968): apparmor="DENIED" operation="open"
profile="virt-aa-helper"
name="/var/lib/virt/images/4aa97c41-29f5-47a5-9704-114737d4e296" pid=778
comm="virt-aa-helper" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Nov 15 19:23:07 swoobat kernel: [92151.005893] audit: type=1400
audit(1542309787.730:969): apparmor="STATUS" operation="profile_load"
profile="unconfined" name="libvirt-625b5c2e-0359-49ee-9c8e-645f867eb746"
pid=780 comm="apparmor_parser"
Nov 15 19:23:07 swoobat kernel: [92151.047502] audit: type=1400
audit(1542309787.774:970): apparmor="DENIED" operation="open"
profile="virt-aa-helper"
name="/var/lib/virt/images/4aa97c41-29f5-47a5-9704-114737d4e296" pid=781
comm="virt-aa-helper" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Nov 15 19:23:07 swoobat kernel: [92151.199302] audit: type=1400
audit(1542309787.922:971): apparmor="STATUS" operation="profile_replace"
profile="unconfined" name="libvirt-625b5c2e-0359-49ee-9c8e-645f867eb746"
pid=783 comm="apparmor_parser"
Nov 15 19:23:07 swoobat kernel: [92151.231199] audit: type=1400
audit(1542309787.954:972): apparmor="DENIED" operation="open"
profile="virt-aa-helper"
name="/var/lib/virt/images/4aa97c41-29f5-47a5-9704-114737d4e296" pid=784
comm="virt-aa-helper" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Nov 15 19:23:08 swoobat kernel: [92151.389145] audit: type=1400
audit(1542309788.114:973): apparmor="STATUS" operation="profile_replace"
profile="unconfined" name="libvirt-625b5c2e-0359-49ee-9c8e-645f867eb746"
pid=786 comm="apparmor_parser"
Nov 15 19:23:08 swoobat kernel: [92151.430570] audit: type=1400
audit(1542309788.154:974): apparmor="DENIED" operation="open"
profile="virt-aa-helper"
name="/var/lib/virt/images/4aa97c41-29f5-47a5-9704-114737d4e296" pid=787
comm="virt-aa-helper" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Nov 15 19:23:08 swoobat kernel: [92151.597399] audit: type=1400
audit(1542309788.322:975): apparmor="STATUS" operation="profile_replace"
info="same as current profile, skipping" profile="unconfined"
name="libvirt-625b5c2e-0359-49ee-9c8e-645f867eb746" pid=789
comm="apparmor_parser"
Nov 15 19:23:08 swoobat kernel: [92151.602891] broam: port 7(vnet5) entered
blocking state
** Affects: libvirt (Ubuntu)
Importance: Undecided
Status: New
** Tags: cdo-qa foundation-engine
** Attachment added: "logs-2018-11-15-19.43.22.tar"
https://bugs.launchpad.net/bugs/1803742/+attachment/5213519/+files/logs-2018-11-15-19.43.22.tar
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1803742
Title:
[Bionic] apparmor="DENIED" operation="open" profile="virt-aa-helper"
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1803742/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
