(In reply to Martin Kalivoda from comment #10) > Do you have updated Tumbleweed with libvirt 5 and did you explicitly set > security_driver to apparmor in /etc/libvirt/qemu.conf ? Yes. I also have 'security_default_confined = 1'. After starting a VM I see its auto-generated profile has been parsed and loaded (along with other libvirt-based profiles) # aa-status | grep libvirt /usr/sbin/dnsmasq//libvirt_leaseshelper /usr/sbin/libvirtd /usr/sbin/libvirtd//qemu_bridge_helper libvirt-66154842-e926-4f92-92f0-1c1bf61dd1ff /usr/sbin/libvirtd (21446) /usr/bin/qemu-system-x86_64 (21753) libvirt-66154842-e926-4f92-92f0-1c1bf61dd1ff