Comment 6 for bug 1710019

Hi Dan was already on that error:
"2017-08-14T23:43:10.255936Z qemu-system-aarch64: -drive
file=/home/ubuntu/vm-start-stop/vms/7936-0_CODE.fd,if=pflash,format=raw,unit=0,readonly=on:
Failed to lock byte 100"

Actually it should be fixed by the last libvirt adding apparmor rules to allow that.
I did so for the image files, but likely you miss rules for the pflash.

Can you please report:
1. the guest xml that you use
2. the dmesg likely including apparmor denials

With both I should hopefully be able to fix custom rules for those as well.
I wonder what rules the pflash have in general, but I'll see when you apply the XML.