Testcase:

# Setup Ldap/SSSD based on the tests
sudo apt install sssd sssd-ldap slapd ldap-utils openssl expect lsb-release 
virt-manager ubuntu-dev-tools
echo "*;*;*;Al0000-2400;libvirt" | sudo tee -a /etc/security/group.conf
sudo pull-lp-source sssd
cd sssd-2.4.1
head -n -5 debian/tests/ldap-user-group-ldap-auth > debian/tests/lp1890858-test
chmod +x debian/tests/lp1890858-test
sudo ./debian/tests/lp1890858-test
sudo systemctl restart libvirtd
sudo login
# use testuser1 / testuser1secret to log in
virth list


I tried the above in:
#1 Focal
- crash as reported in the former comment
- this crash is around the apparmor DENIED message, so it is somewhat related
#2 Impish
- works just fine (neither crash nor apparmor denial)

In both cases the dgram rules for libvirtd are the same.
$ grep -Hrn dgram  /etc/apparmor.d/usr.sbin.libvirtd
/etc/apparmor.d/usr.sbin.libvirtd:43:  network inet dgram,
/etc/apparmor.d/usr.sbin.libvirtd:45:  network inet6 dgram,
/etc/apparmor.d/usr.sbin.libvirtd:47:  network packet dgram,


Now that I have my clean steps to reproduce I'll throw away and recreate both 
environments to be sure there is nothing left from my try to get these steps 
created.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1890858

Title:
  AppArmor profile causes QEMU/KVM - Not Connected

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1890858/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to