Adding /dev/vhost-net to the libvirt-qemu abstraction means that all VMs have access to this file, but I don't think that is what we want to do. Better would be to adjust virt-aa-helper to add this to only VMs that need it, like we do for most all other accesses.
Adding /dev/vhost-net to the libvirt-qemu abstraction means that all VMs have access to this file, but I don't think that is what we want to do. Better would be to adjust virt-aa-helper to add this to only VMs that need it, like we do for most all other accesses.