Comment 5 for bug 2056739

There is also a similar violation [1] in a specific machine instead of virt-aa-helper:

   apparmor="DENIED" operation="open" class="file" profile="libvirt-edef5ae7-03e3-48b1-ac28-a9d8a116492b" name="/etc/gnutls/config" pid=1576 comm="qemu-system-x86" requested_mask="r" denied_mask="r" fsuid=64055 ouid=0

Christian's proposed solution should take care of that as well, but I wanted to mention it just for completeness.

[1] https://cockpit-logs.us-east-1.linodeobjects.com/pull-6048-20240311-121547-77e2f887-ubuntu-stable-cockpit-project-cockpit-machines/log.html#53