Well, may be this is not bug, but expected behaviour.
/etc/apparmor.d/usr.sbin.ejabberdctl
contains
/usr/sbin/ejabberdctl {
....
profile su {
...
}
}
I.e. there is profile su inside.
If I add:
/usr/sbin/ejabberdctl flags=(complain) {
it doesn't change profile su behaviour.
I have to add
profile su flags=(complain) {
then it works.
Problem here is that it breaks idea of scope, because profile su is _inside_,
but does not use flags from outside.
Thank you!
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1700231
Title:
16.04 , apparmor denies dbus communications even with flags=(complain)
Status in apparmor package in Ubuntu:
Incomplete
Bug description:
While investigating
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1699681
found that apparmor denies dbus communications even with flags=(complain) ,
which is wrong behaviour.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1700231/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp
