[libvirt] [PATCH] Fix starting qemu instances when apparmor driver is enabled

Eric Blake eblake at redhat.com
Thu Feb 28 22:59:02 UTC 2013


On 02/27/2013 04:51 PM, Jim Fehlig wrote:
> With the apparmor security driver enabled, qemu instances fail
> to start
> 
> # grep ^security_driver /etc/libvirt/qemu.conf
> security_driver = "apparmor"
> # virsh start test-kvm
> error: Failed to start domain test-kvm
> error: internal error security label already defined for VM
> 
> The model field of virSecurityLabelDef object is always populated
> by virDomainDefGetSecurityLabelDef(), so remove the check for a
> NULL model when verifying if a label is already defined for the
> instance.
> 
> Checking for a NULL model and populating it later in
> AppArmorGenSecurityLabel() has been left in the code to be
> consistent with virSecuritySELinuxGenSecurityLabel().
> ---
>  src/security/security_apparmor.c | 6 ++----
>  1 file changed, 2 insertions(+), 4 deletions(-)

ACK; and safe for 1.0.3.

-- 
Eric Blake   eblake redhat com    +1-919-301-3266
Libvirt virtualization library http://libvirt.org

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 621 bytes
Desc: OpenPGP digital signature
URL: <http://listman.redhat.com/archives/libvir-list/attachments/20130228/cefab69b/attachment-0001.sig>


More information about the libvir-list mailing list