Ha intrigeri beat me by 3 minutes with feedback :-)
Tested it as well over lunch time, working for me too now:
That said:
  Acked-by Christian Ehrhardt <christian.ehrhardt@canonical.com>

On Mon, Dec 19, 2016 at 2:35 PM, intrigeri <intrigeri+libvirt@boum.org> wrote:
Hi,

Guido Günther:
> to cure

>  + virsh lxc-enter-namespace --noseclabel <container> <cmd>
>  libvirt:  error : Expected at least one file descriptor
>  error: internal error: Child process (2714) unexpected exit status 125

> caused by

>  apparmor="DENIED" operation="open" info="Failed name lookup - disconnected path" error=-13 profile="/usr/sbin/libvirtd" name="" pid=1422 comm="libvirtd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
> ---
> Thanks to intrigeri for the suggestion!

Tested for my use cases, doesn't break anything, so FWIW:

Acked-by: intrigeri <intrigeri@debian.org>



--
Christian Ehrhardt
Software Engineer, Ubuntu Server
Canonical Ltd