Vincas Dargis 9d8e111abe dovecot: allow reading dh.pem ... Dovecot is hit with this denial on Debian 10 (buster): ``` type=AVC msg=audit(1603647096.369:24514): apparmor="DENIED" operation="open" profile="dovecot" name="/usr/share/dovecot/dh.pem" pid=28774 comm="doveconf" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 ``` This results in fatal error: ``` Oct 25 19:31:36 dovecot[28774]: doveconf: Fatal: Error in configuration file /etc/dovecot/conf.d/10-ssl.conf line 50: ssl_dh: Can't open file /usr/share/dovecot/dh.pem: Permission denied ``` Add rule to allow reading dh.pem.		2020-10-25 19:30:10 +02:00
..
apparmor/profiles/extras	Merge add Dovecot and other mail related profiles	2020-10-25 11:22:24 +00:00
apparmor.d	dovecot: allow reading dh.pem	2020-10-25 19:30:10 +02:00
Makefile	profiles/Makefile: fix aa-logprof invocation	2020-07-24 23:52:36 -07:00