OpenStack Compute (nova)

  1. Series ocata
  2. Bug #1665698
  3. Comment #22

Comment 22 for bug 1665698

Revision history for this message
Logan V (loganv) wrote :

I also tested hacking in conf.script = "/bin/true" to nova. You suspected it might fail with apparmor preventing /bin/true execution, I can confirm that it did indeed fail.

type=AVC msg=audit(1487951915.530:99345): apparmor="DENIED" operation="exec" profile="libvirt-5ea8f14c-73c8-4e21-9f64-28d60c1919c6" name="/bin/true" pid=802296 comm="qemu-system-x86" requested_mask="x" denied_mask="x" fsuid=0 ouid=0
type=PATH msg=audit(1487951915.530:99345): item=0 name="/bin/true" inode=44 dev=08:01 mode=0100755 ouid=0 ogid=0 rdev=00:00 nametype=NORMAL