Actually, libvirt will likely want to be adjusted too-- Marc used '<loader>OVMF.fd</loader>' which is fine and let's qemu find it and virt-aa-helper happens to think that is ok, cause the path is relative. However, if an absolute path is used (eg '<loader>/usr/share/qemu/OVMF.fd</loader>'), then the guest will not boot for the reasons mentioned in comment #8.
Actually, libvirt will likely want to be adjusted too-- Marc used '<loader> OVMF.fd< /loader> ' which is fine and let's qemu find it and virt-aa-helper happens to think that is ok, cause the path is relative. However, if an absolute path is used (eg '<loader> /usr/share/ qemu/OVMF. fd</loader> '), then the guest will not boot for the reasons mentioned in comment #8.