On Wed, Mar 18, 2015 at 11:44:56PM +0100, Christian Boltz wrote: > Hello, > > usr.lib.dovecot.auth needs to read openssl.cnf: > > <darix> type=AVC msg=audit(1426698024.100:21778): apparmor="DENIED" > operation="open" profile="/usr/lib/dovecot/auth" name="/etc/ssl/openssl.cnf" > pid=19808 comm="auth" requested_mask="r" denied_mask="r" fsuid=488 ouid=0 > > Darix' guess is that this is needed by libpq because he uses a postgresql > database with dovecot and has ssl enabled in postgresql. > > I propose this patch for trunk and 2.9
Acked-by: Seth Arnold <[email protected]> Acked for both. Thanks > > > [ dovecot-openssl.diff ] > > === modified file 'profiles/apparmor.d/usr.lib.dovecot.auth' > --- profiles/apparmor.d/usr.lib.dovecot.auth 2014-09-25 22:37:14 +0000 > +++ profiles/apparmor.d/usr.lib.dovecot.auth 2015-03-18 22:37:48 +0000 > @@ -17,6 +17,7 @@ > #include <abstractions/base> > #include <abstractions/mysql> > #include <abstractions/nameservice> > + #include <abstractions/openssl> > #include <abstractions/wutmp> > #include <abstractions/dovecot-common> > > >
signature.asc
Description: Digital signature
-- AppArmor mailing list [email protected] Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor
