https://bugzilla.novell.com/show_bug.cgi?id=755923 https://bugzilla.novell.com/show_bug.cgi?id=755923#c0 Summary: aa-logconf doesn't seem to pickup difference between inet and inet6 streams Classification: openSUSE Product: openSUSE 12.1 Version: Final Platform: x86-64 OS/Version: openSUSE 12.1 Status: NEW Severity: Normal Priority: P5 - None Component: AppArmor AssignedTo: suse-beta@cboltz.de ReportedBy: suse+build@de-korte.org QAContact: qa-bugs@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:11.0) Gecko/20100101 Firefox/11.0 I had some trouble with the AppArmor profiles for Dovecot. After running aa-complain /usr/lib/dovecot/imap-login for a while, aa-logprof failed to create a working profile. The relevant lines from /var/log/audit/audit.log indicated many instances of the following variety: type=AVC msg=audit(1333648169.009:11707146): apparmor="ALLOWED" operation="accept" parent=25932 profile="/usr/lib/dovecot/imap-login" pid=5049 comm="imap-login" lport=143 family="inet6" sock_type="stream" protocol=6 After running aa-logconf, the profile did contain the line network inet stream, but what actually was needed was network inet6 stream, After adding this to the profile, everything works. Reproducible: Always -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.