Bug#1086844: passt: apparmor profile breaks passt in libguestfs

2025-01-02 Thread Stefano Brivio
On Thu, 2 Jan 2025 09:52:38 + "Richard W.M. Jones" wrote: > On Wed, Nov 27, 2024 at 11:15:24AM +0100, Stefano Brivio wrote: > > Control: reassign 1086844 guestfs-tools > > > > So, I went ahead and submitted a proposal for a very loose initial > > AppArmor profile for guestfs-tools: > > > >

Bug#1086844: passt: apparmor profile breaks passt in libguestfs

2025-01-02 Thread Richard W.M. Jones
On Wed, Nov 27, 2024 at 11:15:24AM +0100, Stefano Brivio wrote: > Control: reassign 1086844 guestfs-tools > > So, I went ahead and submitted a proposal for a very loose initial > AppArmor profile for guestfs-tools: > > https://salsa.debian.org/libvirt-team/guestfs-tools/-/merge_requests/1 Sadl

Bug#1086844: passt: apparmor profile breaks passt in libguestfs

2024-11-28 Thread Stefano Brivio
On Thu, 28 Nov 2024 10:46:35 + "Richard W.M. Jones" wrote: > On Wed, Nov 27, 2024 at 10:39:18PM +0100, Hilko Bengen wrote: > > > > Rich, do you think the AppArmor policy should be part of the upstream > > source distribution? > > I don't really have an opinion on it. For SELinux policies

Bug#1086844: passt: apparmor profile breaks passt in libguestfs

2024-11-28 Thread Daniel P . Berrangé
On Thu, Nov 28, 2024 at 10:46:35AM +, Richard W.M. Jones wrote: > On Wed, Nov 27, 2024 at 10:39:18PM +0100, Hilko Bengen wrote: > > * Stefano Brivio: > > > > > Control: reassign 1086844 guestfs-tools > > > > > > So, I went ahead and submitted a proposal for a very loose initial > > > AppArmor

Bug#1086844: passt: apparmor profile breaks passt in libguestfs

2024-11-28 Thread Richard W.M. Jones
On Wed, Nov 27, 2024 at 10:39:18PM +0100, Hilko Bengen wrote: > * Stefano Brivio: > > > Control: reassign 1086844 guestfs-tools > > > > So, I went ahead and submitted a proposal for a very loose initial > > AppArmor profile for guestfs-tools: > > > > https://salsa.debian.org/libvirt-team/guestfs

Bug#1086844: passt: apparmor profile breaks passt in libguestfs

2024-11-27 Thread Hilko Bengen
* Stefano Brivio: > Control: reassign 1086844 guestfs-tools > > So, I went ahead and submitted a proposal for a very loose initial > AppArmor profile for guestfs-tools: > > https://salsa.debian.org/libvirt-team/guestfs-tools/-/merge_requests/1 > > I checked functionality of several tools, with a

Bug#1086844: passt: apparmor profile breaks passt in libguestfs

2024-11-27 Thread Stefano Brivio
Control: reassign 1086844 guestfs-tools So, I went ahead and submitted a proposal for a very loose initial AppArmor profile for guestfs-tools: https://salsa.debian.org/libvirt-team/guestfs-tools/-/merge_requests/1 I checked functionality of several tools, with and without passt, as root and as

Bug#1086844: passt: apparmor profile breaks passt in libguestfs

2024-11-20 Thread Stefano Brivio
On Tue, 12 Nov 2024 15:10:38 + "Richard W.M. Jones" wrote: > On Tue, Nov 12, 2024 at 03:29:11PM +0100, Stefano Brivio wrote: > > On Tue, 12 Nov 2024 13:52:43 + > > "Richard W.M. Jones" wrote: > > > https://issues.redhat.com/browse/RHEL-65502 > > > > That's not a public link, > >

Bug#1086844: passt: apparmor profile breaks passt in libguestfs

2024-11-12 Thread Stefano Brivio
On Tue, 12 Nov 2024 13:52:43 + "Richard W.M. Jones" wrote: > On Tue, Nov 12, 2024 at 02:22:19PM +0100, Stefano Brivio wrote: > > On Tue, 12 Nov 2024 13:08:00 + > > "Richard W.M. Jones" wrote: > > > > > Do you know where the apparmor profile is shipped right now? Could it > > > be in

Bug#1086844: passt: apparmor profile breaks passt in libguestfs

2024-11-12 Thread Richard W.M. Jones
On Tue, Nov 12, 2024 at 03:29:11PM +0100, Stefano Brivio wrote: > On Tue, 12 Nov 2024 13:52:43 + > "Richard W.M. Jones" wrote: > > https://issues.redhat.com/browse/RHEL-65502 > > That's not a public link, Annoying. I should have made it public now. Rich. -- Richard Jones, Virtualization

Bug#1086844: passt: apparmor profile breaks passt in libguestfs

2024-11-12 Thread Richard W.M. Jones
On Tue, Nov 12, 2024 at 02:22:19PM +0100, Stefano Brivio wrote: > On Tue, 12 Nov 2024 13:08:00 + > "Richard W.M. Jones" wrote: > > > Do you know where the apparmor profile is shipped right now? Could it > > be in libvirt (src/security/apparmor)? > > Yes, but that's the one for libvirt compo

Bug#1086844: passt: apparmor profile breaks passt in libguestfs

2024-11-12 Thread Stefano Brivio
On Tue, 12 Nov 2024 13:08:00 + "Richard W.M. Jones" wrote: > Do you know where the apparmor profile is shipped right now? Could it > be in libvirt (src/security/apparmor)? Yes, but that's the one for libvirt components themselves, and used on Debian without changes from upstream. I don't th

Bug#1086844: Fw: Bug#1086844: passt: apparmor profile breaks passt in libguestfs

2024-11-12 Thread Richard W.M. Jones
rom: Stefano Brivio > To: Hilko Bengen , > pkg-libvirt-maintain...@lists.alioth.debian.org > Cc: Tomas Janousek , 1086...@bugs.debian.org, Debian Bug > Tracking System > Subject: Re: Bug#1086844: passt: apparmor profile breaks passt in > libguestfs > > > Hi, > > On

Bug#1086844: passt: apparmor profile breaks passt in libguestfs

2024-11-06 Thread Stefano Brivio
Hi, On Wed, 06 Nov 2024 15:00:13 + Tomas Janousek wrote: > Package: passt > Version: 0.0~git20241030.ee7d0b6-1 > Severity: normal > X-Debbugs-Cc: t...@nomi.cz > > Dear Maintainer, > > I just tried to run virt-sysprep on a system with passt installed (as a > recommended dep of podman) and

Bug#1086844: passt: apparmor profile breaks passt in libguestfs

2024-11-06 Thread Tomas Janousek
Package: passt Version: 0.0~git20241030.ee7d0b6-1 Severity: normal X-Debbugs-Cc: t...@nomi.cz Dear Maintainer, I just tried to run virt-sysprep on a system with passt installed (as a recommended dep of podman) and I'm getting this error: $ virt-sysprep -v -d deb-tmp --enable customize \