At last, the cause is found. /lib/udev/rules.d/70-udev-acl.rules adds an acl to /dev/kvm denying group write perms. (qemu-kvm installs its own /lib/udev/rules.d/40-qemu-kvm.rules when qemu-kvm is installed) The qemu-kvm.postinst does chgrp and chmod /dev/kvm, but "chmod g+rw" does not remove the group-rw acl. qemu-kvm.postinst needs to manually remove that acl.
** Changed in: qemu-kvm (Ubuntu) Status: Triaged => In Progress ** Also affects: qemu-kvm (Ubuntu Precise) Importance: Undecided Status: New ** Also affects: qemu-kvm (Ubuntu Quantal) Importance: Undecided Status: New ** Also affects: qemu-kvm (Ubuntu Raring) Importance: High Status: In Progress -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to qemu-kvm in Ubuntu. https://bugs.launchpad.net/bugs/1057024 Title: kvm kernel module always loaded, without setting /dev/kvm permissions To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/qemu-kvm/+bug/1057024/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs