"The line is wrong: /sys/devices/**/usb[0-9]*/** r, correct is: /sys/devices/*/*/usb[0-9]*/** r,"
'/sys/devices/**/usb[0-9]*/**' is a superset of '/sys/devices/*/*/usb[0-9]*/**', so this change should not be needed. '/run/udev/data/** r' grants a lot of information to all VMs and should not be added without more information. Can you give steps to reproduce? ** Tags added: apparmor ** Changed in: libvirt (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1552241 Title: libvirt-bin apparmor settings for usb host device To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1552241/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs