When using PureStorage as an iSCSI backend with the nova-compute charm
in aa-profile-mode=enforce, online volume extend operations fail, as
reading /dev/dm-* paths is prevented by AppArmor with the log like:
apparmor="DENIED" operation="open" profile="/usr/bin/nova-compute"
name="/dev/dm-18" pid=1065379 comm="blockdev" requested_mask="r"
denied_mask="r" fsuid=0 ouid=0
Lack of the permission prevents the updated volume size being applied to
instances.
Closes-Bug: #2116217
Change-Id: Ic584906152b618e9e901b8a76ee1934292dfab8f
Signed-off-by: Satya Jhaveri <satya.jhaveri@canonical.com>
Satya Jhaveri
5a3475fc50