This turned out to be not the libvirt security driver and not virt-aa-helper, but instead apparmor_parser not handling spaces in paths in the profile. Fix is to double-quote the dynamic paths (fix included in 0.7.0-1ubuntu8).
This turned out to be not the libvirt security driver and not virt-aa-helper, but instead apparmor_parser not handling spaces in paths in the profile. Fix is to double-quote the dynamic paths (fix included in 0.7.0-1ubuntu8).