Tested with both swtpm-0.8.1-8.fc40 and the issue that swtpm-0.8.1-8.fc40 addressed is also addressed by this one, swtpm-0.8.1-9.fc40. I was able to start VMs without issue in session mode after having been unable to do so on swtpm-0.8.1-7.fc40.

This resolves the issue I had creating and starting VMs using tpm in both system and session mode.

Works for me, but some denials specific to system mode appear on a new host:

> journalctl -b _AUDIT_TYPE_NAME=AVC _COMM=swtpm_localca
May 05 13:14:10 fedora audit[5810]: AVC avc:  denied  { add_name } for  pid=5810 comm="swtpm_localca" name=".lock.swtpm-localca" scontext=system_u:system_r:virtqemud_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1
May 05 13:14:10 fedora audit[5810]: AVC avc:  denied  { create } for  pid=5810 comm="swtpm_localca" name=".lock.swtpm-localca" scontext=system_u:system_r:virtqemud_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=file permissive=1
May 05 13:14:11 fedora audit[5810]: AVC avc:  denied  { setattr } for  pid=5810 comm="swtpm_localca" name="swtpm-localca-rootca-privkey.pem" dev="vda2" ino=1052978 scontext=system_u:system_r:virtqemud_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=file permissive=1

Some other denials also happen in system mode but those seem unrelated to swtpm.

I have not reproduced the very issue of bug2k24, but all other issues seem solved. I have no swtpm-specific denials left in system mode in my logs.

Reaffirming my karma from above, this time with the bug attribution for BZ#2278905.