Christian, Since to test whether the fix I provided was complete you'd have to install freeipa-server to see all the bloat from apparmor, then try the fix and tweak it that would be enough given the sample error message.
But, since you asked, here's a zmore /var/log/syslog.7.gz | grep appa > It's quite small and incomplete, but 796k worth should be enough for you to accept this as a real thing I hope. This log was taken while sssd was in complain mode, not enforcing. Without that ssytemd drop in pushing sssd in complain, most of the 'allowed' would be 'denied', and of course normal operations would be impossible. ** Attachment added: "forChristianEhrhardt.log" https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1884980/+attachment/5387541/+files/forChristianEhrhardt.log -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1884980 Title: patch so apparmor complain->enforcing To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1884980/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs