Created attachment 1192967[details]
update info.txt
Description of problem:
VM's can't be started neither form virt-manager gui nor from virsh because of selinux. The problem appeared after update and reboot (see attachments for update description).
Version-Release number of selected component (if applicable):
libvirt-daemon.x86_64 1.3.3.2-1.fc24 @updates
selinux-policy.noarch 3.13.1-191.12.fc24 @updates
selinux-policy-targeted.noarch 3.13.1-191.12.fc24 @updates
systemd-container.x86_64 229-13.fc24 @updates
virt-manager.noarch 1.4.0-3.fc24 @updates
How reproducible:
100%
Steps to Reproduce:
1. Make sure there is working vm in virt-manager
2. Start the vm in virt-manager
Actual results:
Error popup "Selinux policy denies access" with python stacktrace:
Error starting domain: SELinux policy denies access.
Traceback (most recent call last):
File "/usr/share/virt-manager/virtManager/asyncjob.py", line 88, in cb_wrapper
callback(asyncjob, *args, **kwargs)
File "/usr/share/virt-manager/virtManager/asyncjob.py", line 124, in tmpcb
callback(*args, **kwargs)
File "/usr/share/virt-manager/virtManager/libvirtobject.py", line 83, in newfn
ret = fn(self, *args, **kwargs)
File "/usr/share/virt-manager/virtManager/domain.py", line 1404, in startup
self._backend.create()
File "/usr/lib64/python2.7/site-packages/libvirt.py", line 1035, in create
if ret == -1: raise libvirtError ('virDomainCreate() failed', dom=self)
libvirtError: SELinux policy denies access.
Expected results:
VM started
Additional info:
Try turning off the dontaudit rules
semodule -DB
And try again. Then check the avc's to see if there is anything related to virt or qemu.
Turn the dontaudit rules back on with:
semodule -B
Created attachment 1192967 [details] update info.txt Description of problem: VM's can't be started neither form virt-manager gui nor from virsh because of selinux. The problem appeared after update and reboot (see attachments for update description). Version-Release number of selected component (if applicable): libvirt-daemon.x86_64 1.3.3.2-1.fc24 @updates selinux-policy.noarch 3.13.1-191.12.fc24 @updates selinux-policy-targeted.noarch 3.13.1-191.12.fc24 @updates systemd-container.x86_64 229-13.fc24 @updates virt-manager.noarch 1.4.0-3.fc24 @updates How reproducible: 100% Steps to Reproduce: 1. Make sure there is working vm in virt-manager 2. Start the vm in virt-manager Actual results: Error popup "Selinux policy denies access" with python stacktrace: Error starting domain: SELinux policy denies access. Traceback (most recent call last): File "/usr/share/virt-manager/virtManager/asyncjob.py", line 88, in cb_wrapper callback(asyncjob, *args, **kwargs) File "/usr/share/virt-manager/virtManager/asyncjob.py", line 124, in tmpcb callback(*args, **kwargs) File "/usr/share/virt-manager/virtManager/libvirtobject.py", line 83, in newfn ret = fn(self, *args, **kwargs) File "/usr/share/virt-manager/virtManager/domain.py", line 1404, in startup self._backend.create() File "/usr/lib64/python2.7/site-packages/libvirt.py", line 1035, in create if ret == -1: raise libvirtError ('virDomainCreate() failed', dom=self) libvirtError: SELinux policy denies access. Expected results: VM started Additional info: