I ran virt-aa-helper manually under strace and saw that there was a missing template file. So I copied one of the existing template files and that solved the problem for me: # cp /etc/apparmor.d/libvirt/TEMPLATE.qemu /etc/apparmor.d/libvirt/TEMPLATE.kvm Regards, Samuel