Hello, according to Peter Czanik, the openSUSE syslog-ng maintainer, syslog-ng needs capability dac_read_search.
I also nominate this patch for the 2.7 branch. === modified file 'profiles/apparmor.d/sbin.syslog-ng' --- profiles/apparmor.d/sbin.syslog-ng 2011-09-15 19:21:57 +0000 +++ profiles/apparmor.d/sbin.syslog-ng 2012-01-05 11:05:54 +0000 @@ -23,6 +23,7 @@ capability chown, capability dac_override, + capability dac_read_search, capability fsetid, capability fowner, capability sys_tty_config, Regards, Christian Boltz -- Sorry, mit java kenne ich mich gar nicht aus, das ist mir einfach zu unportabel. [Thorsten Kukuk in suse-linux] -- AppArmor mailing list [email protected] Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor
