Comment 3 for bug 1069534

Thanks for that info.

Your dumpxml output shows

   <graphics type="vnc" socket="/var/lib/libvirt/qemu/laranja.fritz.box.vnc">

but when I reproduce your command exactly I get the normal

   <graphics type='vnc' port='-1' autoport='yes' listen='0.0.0.0'>

Do you know how you ended up with the vnc socket defined?

If it was done by hand, then I'd prefer to say that you should also add the socket file to the apparmor profile by hand. If it was done automatically, then either the new rule should be added as you suggested, or the external tool (if one was used) should perhaps add it to the domain's /etc/apparmor.d/libvirt/libvirt-<uuid>.files file.