Description of problem:
Upgraded from F23 to F24, trying to start my work-related qemu:///session VMs. After working around another regression (bug 1352263), I encountered this:
error: Failed to start domain <name>
error: internal error: Process exited prior to exec: libvirt: error : internal error: cannot apply process capabilities -1
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. Start the qemu:///session guest
2. Fails with the error above
Requires an security-reducing workaround: Setting clear_emulator_capabilities=0 in ~/.config/libvirt/qemu.conf (which didn't exist previously btw).
Previously I was able to run qemu:///session guests without any security-reducing step.
Well, I don't know what changed; I wrote a user unit file to work around bug 1352263 and have virtlogd running whenever I log in; then when I tried to reproduce this bug, I could no longer do so. Closing for now, will reopen if it happens again.
I think this is actually a duplicate of bug 1351995, which claims installing audit >= 2.6.2-1 fixes the issue, so I guess this could have fixed the issue for you...
*** This bug has been marked as a duplicate of bug 1351995 ***
That seems to be the case, audit was upgraded yesterday just as I was reading up on unit files. Thanks for the quick response folks!