#979964 Apparmor bpf and perfmon capname denial when creating a libvirt VM

Package:
libvirt-daemon-system
Source:
libvirt
Description:
Libvirt daemon configuration files
Submitter:
Simon Kobyda
Date:
2021-01-15 09:39:07 UTC
Severity:
normal
#979964#5
Date:
2021-01-12 11:33:21 UTC
From:
To:
2. virsh define /tmp/xml
3. virsh start testVm
#979964#10
Date:
2021-01-15 09:36:27 UTC
From:
To:
Hi,

Simon Kobyda (2021-01-12):

Thanks for reporting this! I can reproduce it on my sid system.

I suppose the fix would be to add these 2 lines to the libvirtd
profile:

  capability bpf,
  capability perfmon,

So I'm reassigning to the package that ships
/etc/apparmor.d/usr.sbin.libvirtd.

Please let me know if I got it wrong and there's something I can do
to help in src:apparmor :)