Comment # 1 on bug 1058847 from Christian Boltz

Your added ptrace rule matches the second log event you listed.

You might need to add another ptrace rule with peer=unconfined for the first
log event - but I wonder why libvirtd needs to ptrace another process, and
which one it is.

The libvirtd profile is shipped by libvirt-daemon, therefore reassigning to
James. (I'll keep an eye on this bug nevertheless ;-)