Comment 3 for bug 1686324

Documenting the workarounds we have until this is solved properly are as following:
- use virsh attach (hot-add) instead of adding it to the guest right away
- If you happen to use the same USB port every time the IDs won't change and you can check what was blocked in dmesg and add just that to the guests (or if you need for more guests libvirt-qemu profile) apparmor profile
- Open up USB more or less in general in libvirt-qemu profile (least recommended for security reasons)

It is yet unclear why:
1. it depends on hot-add vs initial device add (virt-aa-helper makes no difference on these two)
2. it works on some devices but not on others

Please add in every case of this here that you have found with:
1. guest xml
2. lsusb
3. dmesg showing the blocker
(Mine is the initial description with a flash drive)