[Bug 2072524] Re: Allow non-owned lockfile writes in /var/lib/libvirt/swtpm/

[Lena Voytek]

** Changed in: swtpm (Ubuntu Jammy)
       Status: New => In Progress

** Changed in: swtpm (Ubuntu Mantic)
       Status: New => In Progress

** Changed in: swtpm (Ubuntu Noble)
       Status: New => In Progress

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to swtpm in Ubuntu.
https://bugs.launchpad.net/bugs/2072524

Title:
  Allow non-owned lockfile writes in /var/lib/libvirt/swtpm/

Status in swtpm package in Ubuntu:
  Fix Released
Status in swtpm source package in Jammy:
  In Progress
Status in swtpm source package in Mantic:
  In Progress
Status in swtpm source package in Noble:
  In Progress
Status in swtpm source package in Oracular:
  Fix Released

Bug description:
  Based on the upstream comment here -
  https://github.com/stefanberger/swtpm/issues/852#issuecomment-2156039973
  - users are having issues with apparmor denials when attempting to use
  TPM2 NVRAM state lockfiles. This is due to the file not being owned by
  the swtpm user. The issue is fixed by allowing write access to non-
  owned lock files in /var/lib/libvirt/swtpm/. This was fixed upstream
  in my pr here - https://github.com/stefanberger/swtpm/pull/868

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/swtpm/+bug/2072524/+subscriptions