Thanks Seth and Robert,
I'll follows Seth advise and for now propose (B) being the fix for libvirt.
But I'll add a task for apparmor (which carries abstraction/namespace) as that still might be an avenue worthwhile to follow independent to this libvirt fix.
If more people speak up or we find more cases affected then adding it there eventually seems good.
Thanks Seth and Robert, namespace) as that still might be an avenue worthwhile to follow independent to this libvirt fix.
I'll follows Seth advise and for now propose (B) being the fix for libvirt.
But I'll add a task for apparmor (which carries abstraction/
If more people speak up or we find more cases affected then adding it there eventually seems good.