I made an experimental fix available at https://launchpad.net/~paelzer/+archive/ubuntu/libvirt-bug-1633207
In the pure aa-helper tests that continues to work with all my usual minor tests and it fixes dac and dac+apparmor label issues. But I seem to run into issues with doing full guests: qemu-system-x86_64: -object secret,id=masterKey0,format=raw,file=/var/lib/libvirt/qemu/domain-2-yakkety-sec-testfix/master-key.aes: Unable to read /var/lib/libvirt/qemu/domain-2-yakkety-sec-testfix/master-key.aes: Failed to open file '/var/lib/libvirt/qemu/domain-2-yakkety-sec-testfix/master-key.aes': Permission denie That is due to an apparmor deny and might be that this was the issue that was tried to be fixed with the breaking change in libvirt? I'll run more tests on it on my own. But I'd really like to coordinate with the author of the former change what the test case was that made him create the patch. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1633207 Title: VM fails to start with dac security driver added To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1633207/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs