Comment # 2 on bug 1087753 from Luis Henriques

I'm seeing a similar error, which may or may not be the same issue.  Here's
what I'm seeing in dovecot log:

auth: Error: stats: open(old-stats-user) failed: Permission
deniedauth-worker(11225): Error: stats: open(old-stats-user) failed: Permission
denied
imap-login: Login: user=<....... (REMOVED)
master: Fatal: execv(/usr/lib/dovecot/stats) failed: Permission denied
master: Error: service(stats): command startup failed, throttling for 2 secs
stats: Fatal: master: service(stats): child 11227 returned error 84 (exec()
failed)
master: Fatal: execv(/usr/lib/dovecot/stats) failed: Permission denied
master: Error: service(stats): command startup failed, throttling for 4 secs
stats: Fatal: master: service(stats): child 11232 returned error 84 (exec()
failed)

audit.log file also contains relevant info I believe:

type=AVC msg=audit(1522684292.164:370): apparmor="DENIED" operation="open"
profile="/usr/lib/dovecot/auth" name="/run/dovecot/old-stats-user" pid=11224
comm="auth" requested_mask="w" denied_mask="w" fsuid=0 ouid=0
type=AVC msg=audit(1522684292.268:371): apparmor="DENIED" operation="open"
profile="/usr/lib/dovecot/auth" name="/run/dovecot/old-stats-user" pid=11225
comm="auth" requested_mask="w" denied_mask="w" fsuid=0 ouid=0
...
type=AVC msg=audit(1522684292.280:374): apparmor="DENIED" operation="exec"
profile="/usr/sbin/dovecot" name="/usr/lib/dovecot/stats" pid=11227
comm="dovecot" requested_mask="x" denied_mask="x" fsuid=0 ouid=0
type=AVC msg=audit(1522684302.288:375): apparmor="DENIED" operation="exec"
profile="/usr/sbin/dovecot" name="/usr/lib/dovecot/stats" pid=11232
comm="dovecot" requested_mask="x" denied_mask="x" fsuid=0 ouid=0
...
type=AVC msg=audit(1522684312.296:378): apparmor="DENIED" operation="exec"
profile="/usr/sbin/dovecot" name="/usr/lib/dovecot/stats" pid=11237
comm="dovecot" requested_mask="x" denied_mask="x" fsuid=0 ouid=0
type=AVC msg=audit(1522684322.308:379): apparmor="DENIED" operation="exec"
profile="/usr/sbin/dovecot" name="/usr/lib/dovecot/stats" pid=11240
comm="dovecot" requested_mask="x" denied_mask="x" fsuid=0 ouid=0
type=AVC msg=audit(1522684338.328:380): apparmor="DENIED" operation="exec"
profile="/usr/sbin/dovecot" name="/usr/lib/dovecot/stats" pid=11242
comm="dovecot" requested_mask="x" denied_mask="x" fsuid=0 ouid=0
type=AVC msg=audit(1522684370.348:381): apparmor="DENIED" operation="exec"
profile="/usr/sbin/dovecot" name="/usr/lib/dovecot/stats" pid=11252
comm="dovecot" requested_mask="x" denied_mask="x" fsuid=0 ouid=0
type=AVC msg=audit(1522684430.412:382): apparmor="DENIED" operation="exec"
profile="/usr/sbin/dovecot" name="/usr/lib/dovecot/stats" pid=11263
comm="dovecot" requested_mask="x" denied_mask="x" fsuid=0 ouid=0
type=AVC msg=audit(1522684490.472:383): apparmor="DENIED" operation="exec"
profile="/usr/sbin/dovecot" name="/usr/lib/dovecot/stats" pid=11268
comm="dovecot" requested_mask="x" denied_mask="x" fsuid=0 ouid=0