So it looks like we would need to add the following to debian/apparmor/usr.sbin.libvirtd:
/lib/udev/scsi_id PUx, /lib/udev/scsi_id PUx, /usr/lib/xen-common/bin/xen-toolstack PUx, + /usr/lib/xen-*/bin/pygrub PUx,
# Required by nwfilter_ebiptables_driver.c:ebiptablesWriteToTempFile() to # write and run an ebtables script.
So it looks like we would need to add the following to debian/ apparmor/ usr.sbin. libvirtd:
/lib/ udev/scsi_ id PUx, udev/scsi_ id PUx, lib/xen- common/ bin/xen- toolstack PUx, xen-*/bin/ pygrub PUx,
/lib/
/usr/
+ /usr/lib/
# Required by nwfilter_ ebiptables_ driver. c:ebiptablesWri teToTempFile( ) to
# write and run an ebtables script.