Dear Christian Boltz Thank you for your quick support.
On 4/29/19 8:00 PM, Christian Boltz wrote:
As a workaround, you can simply touch /etc/apparmor.d/local/usr.lib.dovecot.lmtp (it's an include file where you can add rules specific for your system, or let it empty if you don't need additional rules)
root# touch /etc/apparmor.d/local/usr.lib.dovecot.lmtp root# aa-genprof vim ERROR: Include file /etc/apparmor.d/XYZ not found and XYZ was... * /etc/apparmor.d/local/usr.lib.dovecot.manageseive-login * /etc/apparmor.d/local/usr.lib.dovecot.auto * /etc/apparmor.d/local/usr.lib.dovecot.imap * /etc/apparmor.d/local/usr.lib.dovecot.anvil * /etc/apparmor.d/local/usr.sbin.dovecot * /etc/apparmor.d/local/usr.lib.dovecot.dovecot.deliver * /etc/apparmor.d/local/usr.lib.dovecot.dovecot.imap-login * /etc/apparmor.d/local/usr.lib.dovecot.pop3 * /etc/apparmor.d/local/usr.lib.dovecot.dict * /etc/apparmor.d/local/usr.lib.dovecot.managesieve * /etc/apparmor.d/local/usr.lib.dovecot.dovecot-lda * /etc/apparmor.d/local/usr.lib.dovecot.ssl-params * /etc/apparmor.d/local/usr.lib.dovecot.dovecot-auth * /etc/apparmor.d/local/usr.lib.dovecot.log * /etc/apparmor.d/local/usr.lib.dovecot.pop3-login * /etc/apparmor.d/local/usr.lib.dovecot.config then "aa-genprof vim" finally works on my Buster testing box. BTW I did not suffer this on Stretch, and I think those "dovecot-related" profile does not necessary for every profiles such like vim. (so I "touch" them to leave them empty.) I created my personal profiles for firefox, vim, gedit, etc. on my Stretch machine and they are working under enforced modes. For me, It seems a kind of regression. Anyway, thank you, again. Regards.