Ubuntu
apparmor package

  1. Bug #228229
  2. Comment #4

Comment 4 for bug 228229

Revision history for this message
Timo Aaltonen (tjaalton) wrote :

sorry, openssh tries to open krb5.conf with 'w::' mask for some reason, so in order to avoid these messages

type=APPARMOR_DENIED msg=audit(1233663334.360:7469): operation="inode_permission" requested_mask="w::" denied_mask="w::" fsuid=0 name="/etc/krb5.conf" pid=17575 profile="/usr/sbin/sshd"

it should have rw. 'r' is already set in abstractions/kerberosclient.