Ubuntu
apparmor package

  1. Bug #978584
  2. Comment #2

Comment 2 for bug 978584

Revision history for this message
In , Suse+build (suse+build) wrote :

User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:11.0) Gecko/20100101 Firefox/11.0

I had some trouble with the AppArmor profiles for Dovecot. After running

    aa-complain /usr/lib/dovecot/imap-login

for a while, aa-logprof failed to create a working profile.

The relevant lines from /var/log/audit/audit.log indicated many instances of the following variety:

type=AVC msg=audit(1333648169.009:11707146): apparmor="ALLOWED" operation="accept" parent=25932 profile="/usr/lib/dovecot/imap-login" pid=5049 comm="imap-login" lport=143 family="inet6" sock_type="stream" protocol=6

After running aa-logconf, the profile did contain the line

    network inet stream,

but what actually was needed was

    network inet6 stream,

After adding this to the profile, everything works.

Reproducible: Always