Comment # 23 on bug 1125841 from James Fehlig

(In reply to Martin Kalivoda from comment #22)
> (In reply to Christian Boltz from comment #21)
> This has nothing to do with apparmor itself and I see no reason to expect
> denials in audit log. As described in #18: This bug is caused by wrong
> expectations from libvirt - it expects /usr/sbin/libvirtd in profile lists
> but profile list only contains "libvirtd" because profile was changed to
> named profile with name "libvirtd" by commit linked in #17. Code linked in
> #18 then thinks that libvirtd is not confined and thinks that apparmor is
> not activated which then results in error from original post.

Yep, it's a libvirt problem. Sorry I haven't had time to create a proper fix.
Hopefully before the week is out...