Comment # 2 on bug 1082230 from Per Jessen

Just taking notes for myself - the creation of that file is part of the
moderated subscription process.  The list is limited (control/submod), so the
moderator has to be notified to approve or deny a subscription.  
In log_error() call, the name of the file to be created was left out . 

The filename is probably 'moderation/subscribeXXXXXXXXXXXXXXXX'. 

Aha - apparmor is getting in the way.  

apparmor="DENIED" operation="mknod" profile="/usr/bin/mlmmj-sub"
name="/var/spool/mlmmj/election-officials/moderation/subscribe725c8faa3e83cae7"

Great, that easily fixed then.