Adding 'capability mknod' to /etc/apparmor.d/abstractions/libvirt-qemu solves it for me.
I'm not sure we want to add that to all VMs. Do we need to add it to the policy during virt-aa-helper?
Adding 'capability mknod' to /etc/apparmor. d/abstractions/ libvirt- qemu solves it for me.
I'm not sure we want to add that to all VMs. Do we need to add it to the policy during virt-aa-helper?