# By default libvirt runs VMs as non-root and uses AppArmor profiles
# to provide host protection and VM isolation.
# For more information, see:
# https://launchpad.net/bugs/1815910
# https://www.redhat.com/archives/libvir-list/2019-April/msg00750.html
/dev/vhost-net rw,
/dev/vhost-vsock rw,