Directories, images, configs, sockets and other stuff in "shared" directory ) must be owned by group (kvm) and have group write permisions.