For fuller explanation see:
https://bugzilla.redhat.com/show_bug.cgi?id=2066773#c1
I'm not very happy with this patch for a few reasons:
- Does every distro use "qemu" as the user that runs qemu?
- Having to run an external process (not a big deal, but a bit clumsy)
- Aren't ACLs actually deprecated?
Anyway the patch does at least work in my local testing.
Rich.