On 2016-04-22 13:19, Carlos E. R. wrote: > On 2016-04-22 12:27, Carlos E. R. wrote: > >> Telcontar:~ # aa-logprof >> Reading log entries from /var/log/audit/audit.log. >> Updating AppArmor profiles in /etc/apparmor.d. >> Enforce-mode changes: >> >> Profile: /usr/sbin/dovecot >> Capability: sys_resource >> Severity: 8 >> >> (A)llow / [(D)eny] / Audi(t) / Abo(r)t / (F)inish >> Adding capability sys_resource to profile. >> >> = Changed Local Profiles = >> >> The following local profiles were changed. Would you like to save them? >> >> [1 - /usr/sbin/dovecot] >> >> (S)ave Changes / [(V)iew Changes] / Abo(r)t >> Writing updated profile for /usr/sbin/dovecot. >> Telcontar:~ # > > > Something else is broken here, because everytime I run "aa-logprof" I > see the same error, even though I save the changes. But dovecot is working.
Not quite:
<2.3> 2016-04-22 13:19:26 Telcontar dovecot - - - master: Error:
service(auth): command startup failed, throttling for 2 secs
<2.2> 2016-04-22 13:19:26 Telcontar dovecot - - - auth: Fatal: master:
service(auth): child 9680 killed with signal 9
<2.6> 2016-04-22 13:19:26 Telcontar dovecot - - - imap-login: Disconnected:
Auth process broken (disconnected before greeting, waited 0 secs): user=<>,
rip=192.168.1.14, lip=192.168.1.14, secured, session <uZvz/xAxbwDAqAEO>
In fact, the change has been applied to /etc/apparmor.d/usr.sbin.dovecot
several times:
capability setuid,
capability sys_chroot,
capability sys_resource,
capability sys_resource,
capability sys_resource,
capability sys_resource,
capability sys_resource,
capability sys_resource,
capability sys_resource,
--
Cheers / Saludos,
Carlos E. R.
(from 13.1 x86_64 "Bottle" at Telcontar)
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Evergreen mailing list Evergreen@lists.rosenauer.org http://lists.rosenauer.org/mailman/listinfo/evergreen
