Comment 44 for bug 1684481

John Johansen (jjohansen) wrote :

Its true there are a few issues with apparmor profiles being loaded as part of a stack when namespacing is involved. However this does not appear to be one of them.

However the application may be behaving slightly differently resulting in the profile needed to be extended. Can you please attach your libvirt profile files


so I can verify their contents. The likely fix is going to be expanding the profile to include access to
  /dev/pts/ptmx rw,

but I still need to verify something else isn't going on, and determine the best location to update.