At least in my instance, and based on at least one other reporter's description, the issue manifests on upgrade of the host to Xenial with existing guests. If you create new guests in Xenial or newer they may very well be configured correctly (I really don't know). My interpretation was that virt-aa-helper added some functionality in Xenial+ which requires this access, but configs from older versions have not granted it. Or at least maybe that would make repro easier?
-- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1546674 Title: virt-aa-helper Apparmor profile missing rules for name resolution To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1546674/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs