Comment # 10 on bug 1195463 from Ralf K���lmel

Created attachment 856907 [details]
extract of the audit.log during smb and nmb service restart

I'm still having "denied" messages during smb/nmb startup(s. attached file) ,
but they don't break the smb service start.

The question is if automatic cleaning of the apparmor cache (through
configuration in the rpm spec) after an update of the apparmor packages would
be a pragmatic way to workaround the problem.
For now i'm afraid to do automatic updates (of apparmor packages) on affected
systems because it could break the samba daemon restart.
But besides a workaround the best would be to find the problem.