Created attachment 1193676 [details]
audit.log

Description of problem:
KVM Virtual Machines fail to start with SELinux access denied error, both from CLI and Virt-Manager (even under root account)

virsh # start Windows7_Siris
error: Failed to start domain Windows7_Siris
error: SELinux policy denies access.

This started happening after installing recent updates on Fedora 24. The only 'unusual' thing on the system is that disk images for the VMs are stored in user's home dir with the following permissions and SELinux context:

-rw-r--r--. 1 root root unconfined_u:object_r:user_home_t:s0 137067102208 Aug 23 17:25 Windows7_Siris.qcow2


Version-Release number of selected component (if applicable):
selinux-policy-targeted-3.13.1-191.12.fc24.noarch

How reproducible:
Always

Steps to Reproduce:
virsh # start Windows7_Siris
error: Failed to start domain Windows7_Siris
error: SELinux policy denies access.

Actual results:
VM failed to start due to SELinux policy.

Expected results:
Should start just fine as it used to.

Additional info:
attached audit.log