Here is the detailed explanation of the issue: qemu-bridge-helper is dynamically linked to libnuma, and libnuma defines numa_init() as an _init function (-Wl,-init=numa_init) that is called by the dynamic loader (ld) each time libnuma is loaded.
When we run qemu-bridge-helper, the dynamic loader loads libnuma and calls numa_init(), numa_init() tries to open /sys/devices/system/node/ folder and this access is denied by apparmor since this permission is not specified in the libvirtd profile (usr.sbin.libvirtd). Here is the call trace: #0 0x00007fa635bd0cd5 in ?? () from /lib/x86_64-linux-gnu/libnuma.so.1 #1 0x00007fa635bf27ef in call_init (l=<optimized out>, argc=argc@entry=1, argv=argv@entry=0x7fff2a421158, env=env@entry=0x7fff2a421168) at ./elf/dl-init.c:74 #2 0x00007fa635bf2904 in call_init (l=<optimized out>, argc=<optimized out>, argv=<optimized out>, env=<optimized out>) at ./elf/dl-init.c:120 #3 _dl_init (main_map=0x7fa635c292e0, argc=1, argv=0x7fff2a421158, env=0x7fff2a421168) at ./elf/dl-init.c:121 #4 0x00007fa635c0eee0 in _dl_start_user () from /lib64/ld-linux-x86-64.so.2 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2079869 Title: qemu-bridge-helper needs apparmor to allow access to /sys/devices/system/node/ To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/2079869/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs