[Bug 1594202] Re: apparmor messages everywhere
Per comment #12 it sounds like the problem resolved for the reporter, possibly due to corrections in their local config. I've not seen apparmor messages such as that in my (admittedly limited) playing with dovecot on bionic, so perhaps/hopefully the issue is just historical now. ** Changed in: dovecot (Ubuntu) Status: Confirmed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1594202 Title: apparmor messages everywhere To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dovecot/+bug/1594202/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1594202] Re: apparmor messages everywhere
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: dovecot (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1594202 Title: apparmor messages everywhere To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dovecot/+bug/1594202/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1594202] Re: apparmor messages everywhere
** Changed in: dovecot (Ubuntu) Status: Incomplete => New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1594202 Title: apparmor messages everywhere To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dovecot/+bug/1594202/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1594202] Re: apparmor messages everywhere
Hi, thanks for all the effort testing this! Very much appreciated. a) Here is the output of apparmor_status (ran as root): https://paste.ubuntu.com/23062732/ b) Actually now is hard to see because I haven't been getting more apparmor messages lately, I'm not sure if because something got fixed in some upgrade or because I finally added some extra rules to the profile myself (without really knowing what I was doing). The last messages I see in /var/log/kern.log are from July, and are the same as the one I reported here. I will attach all the files I have in /etc/apparmor.d/*dovecot* (I think I never change any files without dovecot in the name) in case you want to check if there is anything changed compared to what's distributed by Ubuntu. PS: Now, and for some time now, I can only see apparmor messages complaining about chromium. ** Attachment added: "Dovecot apparmor profiles" https://bugs.launchpad.net/ubuntu/+source/dovecot/+bug/1594202/+attachment/4722306/+files/dovecot-conf.tar.gz -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1594202 Title: apparmor messages everywhere To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dovecot/+bug/1594202/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1594202] Re: apparmor messages everywhere
Thanks for the feedback, and you likely meant bug 1373070 - the other one is about your apport not being able to report. I have created a new KVM installed dovecot via mail-stack-delivery as I usually did and started to similarize our configurations. I found that you had no mail-stack so I had to remove some configs I had - in others you had customized your system I needed to drop: /etc/dovecot/conf.d/20-lmtp.conf /etc/dovecot/conf.d/20-pop3.conf /etc/dovecot/conf.d/auth-ldap.conf.ext /etc/dovecot/dovecot-ldap.conf.ext And I adapted the following which differed Diff: dovecot/conf.d/10-ssl.conf adapted, enable ssl as required (except using self signed cert in my case) dovecot/conf.d/20-imap.conf adapted (max connections) dovecot/conf.d/10-mail.conf adapted, moving inbox to /var/mail dovecot/conf.d/10-auth.conf adapted, disable plaintext auth Finally I needed to add one that you had but I didn't: ./dovecot/dovecot-db.conf.ext This was only delivered in /usr/share in precise, and dropped since then - taking yours for now anyway despite I think Berkley DB support isn't existing atm. Checking server and apparmor status with that after a full reboot: No apparmor Denies. I tested it a bit by conencting for imap, pop3 and smptp (postfix in that latter case) - but no matter what I didn't get any apparmor issues. Here a log of what I see - all as it should be: http://paste.ubuntu.com/22147539/ I'd be interested in: a) if you have a different report on "sudo apparmor_status" b) if the messages you see are aligned to any activity like "receiving a mail" All others were the same by md5sum. ** Changed in: dovecot (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1594202 Title: apparmor messages everywhere To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dovecot/+bug/1594202/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1594202] Re: apparmor messages everywhere
Sorry, I don't have **only** those. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1594202 Title: apparmor messages everywhere To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dovecot/+bug/1594202/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1594202] Re: apparmor messages everywhere
> If you can't find a solution for that you might want to chime in on bug 1542901 and provide some extra info there. Mmm, in that bug I see lots of messages about "disconnected path", but I don't have those. ** Changed in: dovecot (Ubuntu) Status: Incomplete => New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1594202 Title: apparmor messages everywhere To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dovecot/+bug/1594202/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1594202] Re: apparmor messages everywhere
Attaching my dovecot configuration. I don't think I changed much, but I customized it a while ago. ** Attachment added: "Dovecot configuration." https://bugs.launchpad.net/ubuntu/+source/dovecot/+bug/1594202/+attachment/4713425/+files/dovecot-conf.tar.gz -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1594202 Title: apparmor messages everywhere To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dovecot/+bug/1594202/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1594202] Re: apparmor messages everywhere
Once you've replied, please change the bug status back to New. ** Changed in: dovecot (Ubuntu) Status: Confirmed => Incomplete -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1594202 Title: apparmor messages everywhere To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dovecot/+bug/1594202/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1594202] Re: apparmor messages everywhere
The apparmor profile is tailored for the default dovecot install if you have a custom build or have tweaked the configuration the apparmor profile may need to be modified. Can you tell how/where your dovecot came from, apt/snap/custom build Can you please attach your dovecot configs so we can identify how your set up is different. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1594202 Title: apparmor messages everywhere To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dovecot/+bug/1594202/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1594202] Re: apparmor messages everywhere
Hi, and as Robie said thanks for the report. I tried to reproduce, but at least with dovecot as in "mail-stack-delivery" in its default conf it doesn't show up. Yet I found that this very likely is related to a bug in apparmor - see bug 1373070 I asked there for guidance as they already identified various related issues and decided for temporary workarounds e.g. in cups. Also the failing apport-collect is likely related to your mentioned "half server / half desktop" setup. If you can't find a solution for that you might want to chime in on bug 1542901 and provide some extra info there. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1594202 Title: apparmor messages everywhere To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dovecot/+bug/1594202/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1594202] Re: apparmor messages everywhere
** Changed in: dovecot (Ubuntu) Importance: Undecided => Medium -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1594202 Title: apparmor messages everywhere To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dovecot/+bug/1594202/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1594202] Re: apparmor messages everywhere
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: dovecot (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1594202 Title: apparmor messages everywhere To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dovecot/+bug/1594202/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1594202] Re: apparmor messages everywhere
$ apport-collect 1594202 Failed to connect to Mir: Failed to connect to server socket: No such file or directory Unable to init server: Could not connect: Connection refused Failed to connect to Mir: Failed to connect to server socket: No such file or directory Unable to init server: Could not connect: Connection refused /usr/share/apport/apport-gtk:16: PyGIWarning: Wnck was imported without specifying a version first. Use gi.require_version('Wnck', '3.0') before import to ensure that the right version gets loaded. from gi.repository import GLib, Wnck, GdkX11, Gdk (apport-gtk:2988): Gtk-CRITICAL **: gtk_settings_get_for_screen: assertion 'GDK_IS_SCREEN (screen)' failed /usr/share/apport/apport-gtk:60: Warning: g_object_get_qdata: assertion 'G_IS_OBJECT (object)' failed 'apport-gtk.ui')) Segmentation fault (core dumped) I'm on a console on ssh. This is why I haven't used report-bug. $ lsb_release -a No LSB modules are available. Distributor ID: Ubuntu Description:Ubuntu 16.04 LTS Release:16.04 Codename: xenial $ dpkg -l dovecot-core Desired=Unknown/Install/Remove/Purge/Hold | Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend |/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad) ||/ Name Version Architecture Description +++--===-===-== ii dovecot-core 1:2.2.22-1ubuntu2 amd64 secure POP3/IMAP server - core files ** Changed in: dovecot (Ubuntu) Status: Incomplete => New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1594202 Title: apparmor messages everywhere To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dovecot/+bug/1594202/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1594202] Re: apparmor messages everywhere
Once done, please change the bug status back to New. Thanks! ** Changed in: dovecot (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1594202 Title: apparmor messages everywhere To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dovecot/+bug/1594202/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1594202] Re: apparmor messages everywhere
Thank you for taking the time to report this bug and helping to make Ubuntu better. You did not provide any version information. Please execute the following command only once, as it will automatically gather debugging information, in a terminal: apport-collect 1594202 When reporting bugs in the future please use apport by using 'ubuntu- bug' and the name of the package affected. You can learn more about this functionality at https://wiki.ubuntu.com/ReportingBugs. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1594202 Title: apparmor messages everywhere To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dovecot/+bug/1594202/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs