Here is the detailed explanation of the issue:

qemu-bridge-helper is dynamically linked to libnuma, and libnuma defines
numa_init() as an _init function (-Wl,-init=numa_init) that is called by
the dynamic loader (ld) each time libnuma is loaded.

When we run qemu-bridge-helper, the dynamic loader loads libnuma and
calls numa_init(), numa_init() tries to open /sys/devices/system/node/
folder and this access is denied by apparmor since this permission is
not specified in the libvirtd profile (usr.sbin.libvirtd).

Here is the call trace:

#0  0x00007fa635bd0cd5 in ?? () from /lib/x86_64-linux-gnu/libnuma.so.1         
                                                                                
#1  0x00007fa635bf27ef in call_init (l=<optimized out>, argc=argc@entry=1, 
argv=argv@entry=0x7fff2a421158,                                                 
    
    env=env@entry=0x7fff2a421168) at ./elf/dl-init.c:74                         
                                                                               
#2  0x00007fa635bf2904 in call_init (l=<optimized out>, argc=<optimized out>, 
argv=<optimized out>, env=<optimized out>)                                      
 
    at ./elf/dl-init.c:120                                                      
                                                                               
#3  _dl_init (main_map=0x7fa635c292e0, argc=1, argv=0x7fff2a421158, 
env=0x7fff2a421168) at ./elf/dl-init.c:121                                      
           
#4  0x00007fa635c0eee0 in _dl_start_user () from /lib64/ld-linux-x86-64.so.2

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2079869

Title:
  qemu-bridge-helper needs apparmor to allow access to
  /sys/devices/system/node/

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/2079869/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to