Thanks for that info. Your dumpxml output shows
<graphics type="vnc" socket="/var/lib/libvirt/qemu/laranja.fritz.box.vnc"> but when I reproduce your command exactly I get the normal <graphics type='vnc' port='-1' autoport='yes' listen='0.0.0.0'> Do you know how you ended up with the vnc socket defined? If it was done by hand, then I'd prefer to say that you should also add the socket file to the apparmor profile by hand. If it was done automatically, then either the new rule should be added as you suggested, or the external tool (if one was used) should perhaps add it to the domain's /etc/apparmor.d/libvirt/libvirt-<uuid>.files file. ** Changed in: libvirt (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1069534 Title: libvirt doesn't include *.vnc files with apparmor profiles To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1069534/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs