]> xenbits.xensource.com Git - libvirt.git/commit
Allow VM to read sysfs PCI config, revision files
authorMax Goodhart <c@chromakode.com>
Wed, 11 May 2022 22:08:39 +0000 (15:08 -0700)
committerChristian Ehrhardt <christian.ehrhardt@canonical.com>
Fri, 20 May 2022 05:37:14 +0000 (07:37 +0200)
commit42cb54804588aa82e32219fc56c15817f8b1edb0
tree42e9a4ebacff718b6214a913c993324e07fd8c53
parent1bd24e79bee1800e7191863cc4617b12fe614dbe
Allow VM to read sysfs PCI config, revision files

This fixes a blank screen when viewing a VM with virtio graphics and
gl-accelerated Spice display on Ubuntu 22.04 / libvirt 8.0.0 / qemu 6.2.

Without these AppArmor permissions, the libvirt error log contains
repetitions of:

qemu_spice_gl_scanout_texture: failed to get fd for texture

This appears to be similar to this GNOME Boxes issue:
https://gitlab.gnome.org/GNOME/gnome-boxes/-/issues/586

Fixes: https://launchpad.net/bugs/1972075
Signed-off-by: Max Goodhart <c@chromakode.com>
Reviewed-by: Christian Ehrhardt <christian.ehrhardt@canonical.com>
src/security/virt-aa-helper.c