Comment 4 for bug 1993359

Confirmed in QEMU 22.10 from the current ISO image at this time, LVM, no encryption.

$ journalctl | grep denied | grep appa | grep fire
Oct 18 20:09:51 teward-Standard-PC-Q35-ICH9-2009 audit[1248]: AVC apparmor="DENIED" operation="mkdir" class="file" profile="snap-update-ns.firefox" name="/usr/share/cups/doc-root/" pid=1248 comm="6" requested_mask="c" denied_mask="c" fsuid=0 ouid=0
Oct 18 20:09:51 teward-Standard-PC-Q35-ICH9-2009 kernel: audit: type=1400 audit(1666138191.488:56): apparmor="DENIED" operation="mkdir" class="file" profile="snap-update-ns.firefox" name="/usr/share/cups/doc-root/" pid=1248 comm="6" requested_mask="c" denied_mask="c" fsuid=0 ouid=0
Oct 18 20:09:51 teward-Standard-PC-Q35-ICH9-2009 audit[1248]: AVC apparmor="DENIED" operation="mkdir" class="file" profile="snap-update-ns.firefox" name="/usr/share/gimp/2.0/" pid=1248 comm="6" requested_mask="c" denied_mask="c" fsuid=0 ouid=0
Oct 18 20:09:51 teward-Standard-PC-Q35-ICH9-2009 audit[1248]: AVC apparmor="DENIED" operation="mkdir" class="file" profile="snap-update-ns.firefox" name="/usr/share/libreoffice/help/" pid=1248 comm="6" requested_mask="c" denied_mask="c" fsuid=0 ouid=0
Oct 18 20:09:51 teward-Standard-PC-Q35-ICH9-2009 audit[1248]: AVC apparmor="DENIED" operation="open" class="file" profile="snap-update-ns.firefox" name="/var/lib/" pid=1248 comm="6" requested_mask="r" denied_mask="r" fsuid=0 ouid=0

(All firefox related apparmor items are visible at https://pastebin.ubuntu.com/p/jrwcBm62y7/ but I shortened to just the DENIED ones here)