Re: [libvirt] [PATCH] apparmor: allow unix stream for p2p migrations

2018-01-03 Thread Michal Privoznik
On 12/19/2017 02:13 PM, Christian Ehrhardt wrote: > On live migration with --p2p like: > $ virsh migrate --live --p2p kvmguest-bionic-normal \ >qemu+ssh://10.6.221.80/system > > We hit an apparmor deny like: > apparmor="DENIED" operation="file_inherit" > profile="/usr/sbin/libvirtd" p

Re: [libvirt] [PATCH] apparmor: allow unix stream for p2p migrations

2017-12-19 Thread Jamie Strandboge
On Tue, 2017-12-19 at 14:13 +0100, Christian Ehrhardt wrote: > On live migration with --p2p like: > $ virsh migrate --live --p2p kvmguest-bionic-normal \ >qemu+ssh://10.6.221.80/system > > We hit an apparmor deny like: > apparmor="DENIED" operation="file_inherit" > profile="/usr/sbin/

[libvirt] [PATCH] apparmor: allow unix stream for p2p migrations

2017-12-19 Thread Christian Ehrhardt
On live migration with --p2p like: $ virsh migrate --live --p2p kvmguest-bionic-normal \ qemu+ssh://10.6.221.80/system We hit an apparmor deny like: apparmor="DENIED" operation="file_inherit" profile="/usr/sbin/libvirtd" pid=23477 comm="ssh" family="unix" sock_type="stream" protocol=