Dear Christian Boltz
Thank you for your quick support.
On 4/29/19 8:00 PM, Christian Boltz wrote:
As a workaround, you can simply
touch /etc/apparmor.d/local/usr.lib.dovecot.lmtp
(it's an include file where you can add rules specific for your system,
or let it empty if you don't need additional rules)
root# touch /etc/apparmor.d/local/usr.lib.dovecot.lmtp
root# aa-genprof vim
ERROR: Include file /etc/apparmor.d/XYZ not found
and XYZ was...
* /etc/apparmor.d/local/usr.lib.dovecot.manageseive-login
* /etc/apparmor.d/local/usr.lib.dovecot.auto
* /etc/apparmor.d/local/usr.lib.dovecot.imap
* /etc/apparmor.d/local/usr.lib.dovecot.anvil
* /etc/apparmor.d/local/usr.sbin.dovecot
* /etc/apparmor.d/local/usr.lib.dovecot.dovecot.deliver
* /etc/apparmor.d/local/usr.lib.dovecot.dovecot.imap-login
* /etc/apparmor.d/local/usr.lib.dovecot.pop3
* /etc/apparmor.d/local/usr.lib.dovecot.dict
* /etc/apparmor.d/local/usr.lib.dovecot.managesieve
* /etc/apparmor.d/local/usr.lib.dovecot.dovecot-lda
* /etc/apparmor.d/local/usr.lib.dovecot.ssl-params
* /etc/apparmor.d/local/usr.lib.dovecot.dovecot-auth
* /etc/apparmor.d/local/usr.lib.dovecot.log
* /etc/apparmor.d/local/usr.lib.dovecot.pop3-login
* /etc/apparmor.d/local/usr.lib.dovecot.config
then "aa-genprof vim" finally works on my Buster testing box.
BTW I did not suffer this on Stretch,
and I think those "dovecot-related" profile does not necessary
for every profiles such like vim.
(so I "touch" them to leave them empty.)
I created my personal profiles for firefox, vim, gedit, etc.
on my Stretch machine and they are working under enforced modes.
For me, It seems a kind of regression.
Anyway, thank you, again.
Regards.
