http://bugzilla.opensuse.org/show_bug.cgi?id=1088161 Bug ID: 1088161 Summary: Can't use dovecot after upgrade due to missing/wrong apparmor profile Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: AppArmor Assignee: suse-beta@cboltz.de Reporter: lhenriques@suse.com QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- After upgrading Tumbleweed to one of the latest snapshots dovecot got an update and I can't use it anymore. Here's what I see in the dovecot logs: dovecot[29330]: master: Dovecot v2.3.1 (8e2f634) starting up for imap dovecot[29333]: imap-login: Login: user=<MY-USER>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=29340, TLS, session=<SESSION> dovecot[29333]: master: Fatal: execv(/usr/lib/dovecot/stats) failed: Permission denied dovecot[29330]: master: Error: service(stats): command startup failed, throttling for 2 secs dovecot[29333]: stats: Fatal: master: service(stats): child 29341 returned error 84 (exec() failed) dovecot[29333]: master: Fatal: execv(/usr/lib/dovecot/stats) failed: Permission denied dovecot[29330]: master: Error: service(stats): command startup failed, throttling for 4 secs dovecot[29333]: stats: Fatal: master: service(stats): child 29344 returned error 84 (exec() failed) Looking at /var/log/audit/audit.log here's what I see: type=AVC msg=audit(1522794786.771:126): apparmor="DENIED" operation="exec" profile="/usr/sbin/dovecot" name="/usr/lib/dovecot/stats" pid=4073 comm="dovecot" requested_mask="x" denied_mask="x" fsuid=0 ouid=0 type=AVC msg=audit(1522794796.783:127): apparmor="DENIED" operation="exec" profile="/usr/sbin/dovecot" name="/usr/lib/dovecot/stats" pid=4074 comm="dovecot" requested_mask="x" denied_mask="x" fsuid=0 ouid=0 I've seen bug https://bugzilla.opensuse.org/show_bug.cgi?id=1087753 but I'm not sure it's actually related. -- You are receiving this mail because: You are on the CC list for the bug.