http://bugzilla.opensuse.org/show_bug.cgi?id=1188296 Bug ID: 1188296 Summary: [Build 20210712] apparmor/dovecot profile too restrictive Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: https://openqa.opensuse.org/tests/1839343/modules/usr_ lib_dovecot_pop3/steps/47 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: AppArmor Assignee: suse-beta@cboltz.de Reporter: dimstar@opensuse.org QA Contact: qa-bugs@suse.de Found By: openQA Blocker: Yes ## Observation openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-apparmor_profile@64bit fails in [usr_lib_dovecot_pop3](https://openqa.opensuse.org/tests/1839343/modules/usr_lib_dovecot_pop3/steps...) type=AVC msg=audit(1626220647.522:754): apparmor="DENIED" operation="open" profile="dovecot-auth" name="/etc/login.defs.d/" pid=5031 comm="auth" requested_mask="r" denied_mask="r" fsuid=0 ouid=0FSUID="root" OUID="root" type=USER_AUTH msg=audit(1626220647.530:755): pid=5031 uid=0 auid=4294967295 ses=4294967295 subj==dovecot-auth (enforce) msg='op=PAM:authentication grantors=pam_gnome_keyring,pam_unix acct="recipient" exe="/usr/lib/dovecot/auth" hostname=::1 addr=::1 terminal=dovecot res=success'UID="root" AUID="unset" type=AVC msg=audit(1626220647.530:756): apparmor="DENIED" operation="open" profile="dovecot-auth" name="/etc/login.defs.d/" pid=5031 comm="auth" requested_mask="r" denied_mask="r" fsuid=0 ouid=0FSUID="root" OUID="root" type=USER_ACCT msg=audit(1626220647.530:757): pid=5031 uid=0 auid=4294967295 ses=4294967295 subj==dovecot-auth (enforce) msg='op=PAM:accounting grantors=pam_unix acct="recipient" exe="/usr/lib/dovecot/auth" hostname=::1 addr=::1 terminal=dovecot res=success'UID="root" AUID="unset" SCRIPT_FINISHEDgrprv-0- ## Test suite description Maintainer: llzhao@suse.de. Test AppArmor profiles with an existing disk image. ## Reproducible Fails since (at least) Build [20210412](https://openqa.opensuse.org/tests/1697443) ## Expected result Last good: [20210410](https://openqa.opensuse.org/tests/1696381) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensuse&flavor=DVD&machine=64bit&test=apparmor_profile&version=Tumbleweed) -- You are receiving this mail because: You are on the CC list for the bug.