Hi, I might be wrong here, but it seems that when libvirt spawns a new qemu process, it sets its uid and gid (qemu:qemu by deafult) but does not call initgroups(), so the spawned qemu cannot read files that are owned by qemu auxiliary groups. Am I right? How difficult is the fix? Dan.