Bug 713444 - Auditing of QEMU driver disk hotunplug events logs is missing and/or incorrect
Summary: Auditing of QEMU driver disk hotunplug events logs is missing and/or incorrect
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 5
Classification: Red Hat
Component: libvirt
Version: 5.8
Hardware: Unspecified
OS: Unspecified
urgent
high
Target Milestone: rc
: ---
Assignee: Daniel Veillard
QA Contact: Virtualization Bugs
URL:
Whiteboard:
Depends On: 710151
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-06-15 12:58 UTC by RHEL Program Management
Modified: 2011-10-26 17:19 UTC (History)
10 users (show)

Fixed In Version: libvirt-0.8.2-15.el5_6.5
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2011-10-26 17:19:21 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2011:1411 0 normal SHIPPED_LIVE libvirt bug fix update 2011-10-26 17:19:16 UTC

Description RHEL Program Management 2011-06-15 12:58:26 UTC
This bug has been copied from bug #710151 and has been proposed
to be backported to 5.6 z-stream (EUS).

Comment 5 yanbing du 2011-10-14 07:44:00 UTC
libvirt-0.8.2-15.el5_6.5
kernel-2.6.18-238.27.1.el5
kvm-83-224.el5_6.1

Verified this bug.
# cat disk.xml 
<disk type="file">
   <source file="/var/lib/libvirt/images/test.img" />
   <target dev="vdb" />
</disk>
# virsh detach-device RHEL-5.5-PAE-virtio.raw disk.xml 
Device detached successfully
# grep detach /var/log/audit/audit.log 
type=VIRT_RESOURCE msg=audit(1318607284.480:78): user pid=3959 uid=0 auid=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='resrc=disk reason=detach vm="RHEL-5.5-PAE-virtio.raw" uuid=bb5a62dc-6b0f-56f1-34a8-fd2de524e7c1 old-disk="/var/lib/libvirt/images/test.img" new-disk="?": exe="/usr/sbin/libvirtd" (hostname=?, addr=?, terminal=? res=success)'

Comment 6 errata-xmlrpc 2011-10-26 17:19:21 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2011-1411.html


Note You need to log in before you can comment on or make changes to this bug.