I guess as the binary is still there it has to be enabled in apparmor. Though on the other hand, qemu-dm is the old device-model which would/should only be used when the old xm/xend toolstack is used. And Trusty was the last release that had that code in at all and I tried hard to get users switched over to xl/libxl (which would use the standard qemu-system-i386 instead).
So I am maybe a little hesitant here...
I guess as the binary is still there it has to be enabled in apparmor. Though on the other hand, qemu-dm is the old device-model which would/should only be used when the old xm/xend toolstack is used. And Trusty was the last release that had that code in at all and I tried hard to get users switched over to xl/libxl (which would use the standard qemu-system-i386 instead).
So I am maybe a little hesitant here...