[Bug 1968335] Re: apparmor profile needs extension

[Launchpad Bug Tracker]

This bug was fixed in the package swtpm - 0.6.3-0ubuntu3

---------------
swtpm (0.6.3-0ubuntu3) jammy; urgency=medium

  * d/usr.bin.swtpm: Add additional apparmor rules
    - allow full interaction with libvirt (LP: #1968187)
    - add qemu socket rules (LP: #1968335)

 -- Lena Voytek <lena.voytek at canonical.com>  Tue, 12 Apr 2022 07:49:45
-0700

** Changed in: swtpm (Ubuntu)
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to swtpm in Ubuntu.
https://bugs.launchpad.net/bugs/1968335

Title:
  apparmor profile needs extension

Status in swtpm package in Ubuntu:
  Fix Released

Bug description:
  Hi team,
  I've tried to create a socket activated systemd service for supplying a software tpm for qemu. As it didn't worked I recognized that the swtpm package ships an apparmor profile. To make it work i've to add a read/write/lock permission for the tpm's nvram folder and a read/write permission for the tpm's unix socket used for the connection with qemu.

  Since there is no default location for the tpm nvram (correct?) I
  suggest using "/var/lib/swtpm" which follows the /var/lib/<package>
  convention.

  Since there is no default location for the tpm unix socket I suggest
  using "/run/swtpm/sock" which follows the systemd.socket unit
  conventions

  A patch which adds the settings is attached to this message.

  Greetings,
  André

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/swtpm/+bug/1968335/+subscriptions