Control: tags -1 fixed-upstream

On Tue, Oct 08, 2024 at 10:08:13AM -0400, Dietmar May wrote:
> > The obvious solution is to add this binary to "abstractions" and reload
> > apparmor.
> 
> Confirmed that adding the following
> 
> /usr/libexec/qemu-system-i386 rmix,
> 
> to
> 
> /etc/apparmor.d/abstractions/libvirt-qemu
> 
> in bookworm 12.7 gets past this error.  (At or about line 174 looks
> reasonable.)

Fix merged upstream.

  commit 81493d8eb6ec5d3f063b0b5770df33ed656d6766
  Author: Andrea Bolognani <[email protected]>
  Date:   Tue Oct 15 11:50:36 2024 +0200

    apparmor: Allow running i686 VMs on Debian 12
    
    In Debian 12, the qemu-system-i386 binary in /usr/bin is a wrapper
    script, with the actual executable living in /usr/libexec instead.
    This makes it impossible to run i686 VMs when AppArmor is enabled.
    
    Allow running the actual binary.
    
    https://bugs.debian.org/1030926
    
    Signed-off-by: Andrea Bolognani <[email protected]>
    Reviewed-by: Jim Fehlig <[email protected]>

  
https://gitlab.com/libvirt/libvirt/-/commit/81493d8eb6ec5d3f063b0b5770df33ed656d6766

I'll work on ensuring that it's included in the next stable update.

-- 
Andrea Bolognani <[email protected]>
Resistance is futile, you will be garbage collected.

Attachment: signature.asc
Description: PGP signature

Reply via email to