Talking with jjohansen, this is both a bug in the auditing code in the kernel and in libvirt. To fix this, we will need to perform an SRU to fix the kernel audit masking and libvirt to add a deny rule for the write access.
Talking with jjohansen, this is both a bug in the auditing code in the kernel and in libvirt. To fix this, we will need to perform an SRU to fix the kernel audit masking and libvirt to add a deny rule for the write access.