Comment 6 for bug 1004606

Thanks Murrayy, actually it's apparmour the problem:

the --disk-only option of snapshot-create[-as] only supports external snapshot so it tries to create a new file which name matches no apparmour regexps in the corresponding profile.