I have successfully (I believe) built (rebuilt on Ubuntu 14.04), installed, and used libvirt 1.2.2. Behaviorally I can’t tell the difference between what I’ve built and what Ubuntu distributes.

Specifically, “virsh capabilities” shows this:

    <secmodel>

      <model>apparmor</model>

      <doi>0</doi>

    </secmodel>

    <secmodel>

      <model>dac</model>

      <doi>0</doi>

      <baselabel type='kvm'>+112:+113</baselabel>

      <baselabel type='qemu'>+112:+113</baselabel>

    </secmodel>

Which seems reasonable as well as expected.

I build 1.2.8 using the same commands, install the generated packages, recycle, and virsh reports this:

    <secmodel>

      <model>none</model>

      <doi>0</doi>

    </secmodel>

    <secmodel>

      <model>dac</model>

      <doi>0</doi>

      <baselabel type='kvm'>+112:+113</baselabel>

      <baselabel type='qemu'>+112:+113</baselabel>

    </secmodel>

The app armor security model is missing, but It’s unclear why that might be. The app armor library is linked in and used (according to ldd), and nothing else on the system changes. I can install / de-install the two versions and repeatedly demonstrate this change.

Any suggestions on what I should be looking for? Nothing comes up via a web search. 

Again: no special options on the configure, and the same technique is used to build both versions. I’m looking for any pointers before I start digging into the code.

Thanks in advance!!

Gary