@Cathy Thanks for the quick investigation. While messing with my selinux rules, I noticed that adding a custom module with audit2allow did not fix the problem. Well, since I'm running Aeon, and since tpm should play an important role in it later, I think the ideal setup in Aeon should be to use passthrough. I honestly forgot I had turned off tpm in the bios due to earlier incompatibilities, or else I would have used it for my VM.