{"action":"created","issue":{"url":"https://api.github.com/repos/cockpit-project/cockpit/issues/6901","repository_url":"https://api.github.com/repos/cockpit-project/cockpit","labels_url":"https://api.github.com/repos/cockpit-project/cockpit/issues/6901/labels{/name}","comments_url":"https://api.github.com/repos/cockpit-project/cockpit/issues/6901/comments","events_url":"https://api.github.com/repos/cockpit-project/cockpit/issues/6901/events","html_url":"https://github.com/cockpit-project/cockpit/issues/6901","id":234251977,"number":6901,"title":"Ubuntu: Apparmor denies libvirt from accessing /etc/gss/mech.d/","user":{"login":"martinpitt","id":200109,"avatar_url":"https://avatars3.githubusercontent.com/u/200109?v=4","gravatar_id":"","url":"https://api.github.com/users/martinpitt","html_url":"https://github.com/martinpitt","followers_url":"https://api.github.com/users/martinpitt/followers","following_url":"https://api.github.com/users/martinpitt/following{/other_user}","gists_url":"https://api.github.com/users/martinpitt/gists{/gist_id}","starred_url":"https://api.github.com/users/martinpitt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/martinpitt/subscriptions","organizations_url":"https://api.github.com/users/martinpitt/orgs","repos_url":"https://api.github.com/users/martinpitt/repos","events_url":"https://api.github.com/users/martinpitt/events{/privacy}","received_events_url":"https://api.github.com/users/martinpitt/received_events","type":"User","site_admin":false},"labels":[{"id":279643827,"url":"https://api.github.com/repos/cockpit-project/cockpit/labels/knownissue","name":"knownissue","color":"e11d21","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":622,"created_at":"2017-06-07T15:34:58Z","updated_at":"2017-11-28T08:24:31Z","closed_at":null,"author_association":"MEMBER","body":"This got triggered in PR #5932. I filed it as https://launchpad.net/bugs/1696471 downstream, using this for the \"naughty\" quirk.\r\n```\r\n# testBasic (check_machines.TestMachines)\r\n\r\nUnexpected journal message 'audit: type=1400 audit(1496843220.188:16): apparmor=\"DENIED\" operation=\"open\" profile=\"libvirt-89918339-e097-436a-b898-3b3d8ce31dbd\" name=\"/etc/gss/mech.d/\" pid=6404 comm=\"qemu-system-x86\" requested_mask=\"r\" denied_mask=\"r\" fsuid=64055 ouid=0'\r\n```"},"comment":{"url":"https://api.github.com/repos/cockpit-project/cockpit/issues/comments/347448146","html_url":"https://github.com/cockpit-project/cockpit/issues/6901#issuecomment-347448146","issue_url":"https://api.github.com/repos/cockpit-project/cockpit/issues/6901","id":347448146,"user":{"login":"cockpituous","id":14330603,"avatar_url":"https://avatars1.githubusercontent.com/u/14330603?v=4","gravatar_id":"","url":"https://api.github.com/users/cockpituous","html_url":"https://github.com/cockpituous","followers_url":"https://api.github.com/users/cockpituous/followers","following_url":"https://api.github.com/users/cockpituous/following{/other_user}","gists_url":"https://api.github.com/users/cockpituous/gists{/gist_id}","starred_url":"https://api.github.com/users/cockpituous/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cockpituous/subscriptions","organizations_url":"https://api.github.com/users/cockpituous/orgs","repos_url":"https://api.github.com/users/cockpituous/repos","events_url":"https://api.github.com/users/cockpituous/events{/privacy}","received_events_url":"https://api.github.com/users/cockpituous/received_events","type":"User","site_admin":false},"created_at":"2017-11-28T08:24:31Z","updated_at":"2017-11-28T08:24:31Z","author_association":"CONTRIBUTOR","body":"verify/ubuntu-1604\nOoops, it happened again<hr>\n```\n# ----------------------------------------------------------------------\n# testInlineConsole (check_machines.TestMachines)\n#\nWarning: Permanently added '[127.0.0.2]:2401' (ECDSA) to the list of known hosts.\r\n> connecting\n>  Msg: noVNC ready: native WebSockets, canvas rendering\n> \n>  Msg: Starting VNC handshake\n>  Msg: Sent ProtocolVersion: 003.008\n>  Msg: Authenticating using scheme: 1\n> \n>  Msg: Authentication OK\n>  Msg: Authentication OK\n>  Msg: Connected (unencrypted) to: QEMU (subVmTest1)\nUnexpected journal message 'audit: type=1400 audit(1511857529.300:15): apparmor=\"DENIED\" operation=\"open\" profile=\"libvirt-f44dfa17-69a1-4dc2-906f-0ba8afe00d84\" name=\"/etc/gss/mech.d/\" pid=1851 comm=\"qemu-system-x86\" requested_mask=\"r\" denied_mask=\"r\" fsuid=64055 ouid=0'\nWrote TestMachines-testInlineConsole-ubuntu-1604-127.0.0.2-2401-FAIL.js.log\nJournal extracted to TestMachines-testInlineConsole-ubuntu-1604-127.0.0.2-2401-FAIL.log\nTraceback (most recent call last):\n  File \"/build/cockpit/test/common/testlib.py\", line 604, in tearDown\n    self.check_journal_messages()\n  File \"/build/cockpit/test/common/testlib.py\", line 738, in check_journal_messages\n    raise Error(first)\nError: audit: type=1400 audit(1511857529.300:15): apparmor=\"DENIED\" operation=\"open\" profile=\"libvirt-f44dfa17-69a1-4dc2-906f-0ba8afe00d84\" name=\"/etc/gss/mech.d/\" pid=1851 comm=\"qemu-system-x86\" requested_mask=\"r\" denied_mask=\"r\" fsuid=64055 ouid=0\n\nnot ok 5 testInlineConsole (check_machines.TestMachines) # duration: 28s\nWrote TestMachines-testInlineConsole-ubuntu-1604-127.0.0.2-2401-FAIL.png\nWrote TestMachines-testInlineConsole-ubuntu-1604-127.0.0.2-2401-FAIL.html\nWrote TestMachines-testInlineConsole-ubuntu-1604-127.0.0.2-2401-FAIL.js.log\nJournal extracted to TestMachines-testInlineConsole-ubuntu-1604-127.0.0.2-2401-FAIL.log\n```\nFirst occurrence: 2017-11-28T08:25:40.038064 | revision cf89b14562ce08d65cf0e50fb3fc658bfc3ce56c, [logs](http://fedorapeople.org/groups/cockpit/logs/pull-8176-20171128-075757-cf89b145-verify-ubuntu-1604/log.html)\nTimes recorded: 1\nLatest occurrences:\n\n- 2017-11-28T08:25:40.038064 | revision cf89b14562ce08d65cf0e50fb3fc658bfc3ce56c, [logs](http://fedorapeople.org/groups/cockpit/logs/pull-8176-20171128-075757-cf89b145-verify-ubuntu-1604/log.html)\n"}}
{"actor":{"display_login":"cockpituous"}}