The summary for now is:
- one of the labeling calls does not use append=true
- thereby the apparmor rules get re-rendered from XML throwing away former appended paths
- the snapshot case here represents two calls and the second throws away the content of the former one
If from here all goes well will submit patches some-when this week.
FYI - I was debugging this in the context of Ubuntu bug https:/ /bugs.launchpad .net/ubuntu/ +source/ libvirt/ +bug/1845506
I think I found the root cause (see recent updates there)
The summary for now is:
- one of the labeling calls does not use append=true
- thereby the apparmor rules get re-rendered from XML throwing away former appended paths
- the snapshot case here represents two calls and the second throws away the content of the former one
If from here all goes well will submit patches some-when this week.