Hi, Christian Ehrhardt: > Currently virt-aa-helper has no support for pools, so if you use a volume > from a pool like: > <disk type='volume' device='disk'> > <driver name='qemu' type='raw' cache='none'/> > <source pool='internal' volume='foo'/> > <target dev='vdc' bus='virtio'/> > </disk> > Then there is no matching apparmor rule generated to allow qemu to access > the related devices. Honestly I had no idea: all the disks for VMs I manage are backed either by LVs or by qcow2 files. I'm not versed into libvirt's code base (nor C by the way) so I'm afraid I won't be useful at all in this discussion. Please keep Cc'ing me only if there are user-facing questions that I can be useful for :) Take care, cheers, -- intrigeri -- libvir-list mailing list libvir-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/libvir-list