LinuxQuestions.org - QEMU can't read ACPI SLIC table from file

- Linux - Virtualization and Cloud (https://www.linuxquestions.org/questions/linux-virtualization-and-cloud-90/)

- - QEMU can't read ACPI SLIC table from file (https://www.linuxquestions.org/questions/linux-virtualization-and-cloud-90/qemu-cant-read-acpi-slic-table-from-file-4175609298/)

QEMU can't read ACPI SLIC table from file

Some time ago I created VM with Windows 7 using virt-manager under Debian 8. To make it work correctly I edited VM description and added strings to load SLIC table from corresponding file, containing dump of the SLIC table.

Code:

  <qemu:commandline>

    <qemu:arg value='-acpitable'/>

    <qemu:arg value='file=/path/to/slic.bin'/>

  </qemu:commandline>

It worked like a charm and Windows was activated.

Later I reinstalled my system and moved to Ubuntu. Now trying to restore VM. I have XML with VM definition as well as disk image, so I imported XML, changing path to disk image and SLIC dump, but can not start VM in virt-mananer, error is:

Code:

qemu-system-x86_64: -acpitable file=/tmp/slic.bin: Wrong acpi table provided: can't open file /tmp/slic.bin: Permission denied

File exists and my user has all permissions. I tried to change owner of this file to libvirt-qemu user and give him all permissions, but this does not helps. Also I tried to recreare SLIC dump and use new file instead of an old file. Also without success.

If I remove "-acpitable" from XML, then VM works, but Windows activation is lost.

Any ideas what can be wrong?

Ubuntu 16.04.2
virt-manager 1.3.2
qemu 2.5.0

Mandatory Access Control?

I don't have an answer for you, but here are a few suggestions:

If you were on a RH based system like Fedora/CentOS or RedHat, I'd recommend checking SeLinux file contexts. (restorecon -RFv ./<file>)

As you are on Ubuntu, I'm not sure - I know that Ubuntu uses AppArmor, perhaps you could look into that. It's similar to SeLinux in the sense that it is a Mandatory Access Control security layer, but I have no idea how it works. Check the following site which has some information about AppArmor audit and log messages: http://wiki.apparmor.net/index.php/A..._the_Log_files

Also, your user might need to be part of a specific group which gives access to the file?

Cheers,