I looked into this a little more and believe this is a limitation of libvirt and kvm interaction. kvm doesn't seem to have a way to specify the image is readonly. The best option is to suppress the denied message since it will happen every time and lead to confusion in normal use (and debugging).
I looked into this a little more and believe this is a limitation of libvirt and kvm interaction. kvm doesn't seem to have a way to specify the image is readonly. The best option is to suppress the denied message since it will happen every time and lead to confusion in normal use (and debugging).