# AppArmor Configuration

Configure AppArmor on each host to allow libvirt/QEMU to access VFIO devices for SR-IOV Virtual Functions (VFs).

Add the following entry to the local `libvirt-qemu` AppArmor abstraction file:

```
```
# File: /etc/apparmor.d/local/abstractions/libvirt-qemu  
# Allow read/write/lock access to all VFIO group devices for SR-IOV VFs  
/dev/vfio/* krw,
```
```
