Bug 1068880 - security/virt-aa-helper.c - Unable to handle unix sockets
Summary: security/virt-aa-helper.c - Unable to handle unix sockets
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Virtualization Tools
Classification: Community
Component: libvirt
Version: unspecified
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Libvirt Maintainers
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2014-02-22 20:46 UTC by Tony
Modified: 2016-03-21 22:33 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2016-03-21 22:33:44 UTC
Embargoed:


Attachments (Terms of Use)
Add ability to handle unix sockets (2.96 KB, patch)
2014-02-22 20:46 UTC, Tony
no flags Details | Diff


Links
System ID Private Priority Status Summary Last Updated
Launchpad 1015154 0 None None None Never

Description Tony 2014-02-22 20:46:17 UTC
Created attachment 866472 [details]
Add ability to handle unix sockets

Description of problem:

Originally raised downstream in the Ubuntu distribution
https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1015154

Attempting to create socket connection between VM host and a pre-existing guest.
Following this guide
http://wiki.libvirt.org/page/Qemu_guest_agent

New channel defined in VM

<channel type='unix'>
   <source mode='bind' path='/var/lib/libvirt/qemu/app-dev-tony.agent'/>
   <target type='virtio' name='org.qemu.guest_agent.0'/>
</channel>

When starting VM, get the following

error: Failed to start domain app-dev-tony
error: internal error Process exited while reading console log output: char device redirected to /dev/pts/3
bind(unix:/var/lib/libvirt/qemu/app-dev-tony.agent): Permission denied
chardev: opening backend "socket" failed: Permission denied

I've had a quick look at the source for virt-aa-helper, and attach (what I think is) a patch for the issue.
But I am in no way a C developer...

Comment 1 Cole Robinson 2016-03-21 22:33:44 UTC
Sorry this never received a response... a similar patch was eventually applied upstream:

commit 56ba2f99a587f9582ca960165ad67eea18075bb2
Author: Serge Hallyn <serge.hallyn>
Date:   Fri Jul 3 19:01:34 2015 +0000

    virt-aa-helper: add unix channels for nserials as well


Note You need to log in before you can comment on or make changes to this bug.