(In reply to comment #2)
> (In reply to comment #1)
> > The problem is caused by a change in the logging format. See the upstream
> > bugreport https://bugs.launchpad.net/apparmor/+bug/800826
>
> Ouch! That's over 9 months old already. Any chance of fixing this?
AFAIK Steve is working on a patch already, so there's hope ;-)
> > Independent from that - are there other dovecot-related profiles that need an
> > inet6 rule added? I'd guess usr.lib.dovecot.managesieve-login could need it -
> > at least it already contains an inet rule.
>
> I don't know, but I guess one would need this if using IPv6 to connect. Updates
> to sieve scripts on my system oddly enough will use 127.0.0.1,
Not ::1 ? ;-)
Seriously: allowing IPv6 isn't a big risk IMHO, so I'll propose it upstream.
> I can make this work again by running /usr/sbin/dovecot in complain mode, but
> strangely enough this doesn't log anything in /var/log/audit/audit.log.
Indeed, that sounds really strange.
What happens if you add
/home/arjen/sieve/tmp/*.mail.sieve rw,
to your dovecot profile and switch it back to enforce mode?
(In reply to comment #2) /bugs.launchpad .net/apparmor/ +bug/800826
> (In reply to comment #1)
> > The problem is caused by a change in the logging format. See the upstream
> > bugreport https:/
>
> Ouch! That's over 9 months old already. Any chance of fixing this?
AFAIK Steve is working on a patch already, so there's hope ;-)
> > Independent from that - are there other dovecot-related profiles that need an dovecot. managesieve- login could need it -
> > inet6 rule added? I'd guess usr.lib.
> > at least it already contains an inet rule.
>
> I don't know, but I guess one would need this if using IPv6 to connect. Updates
> to sieve scripts on my system oddly enough will use 127.0.0.1,
Not ::1 ? ;-)
Seriously: allowing IPv6 isn't a big risk IMHO, so I'll propose it upstream.
> However, updating still fails:
> open(/home/ arjen/sieve/ tmp/ingo- 1333660114. M954214P9319. mail.sieve)
> failed: Permission denied
> I can make this work again by running /usr/sbin/dovecot in complain mode, but audit/audit. log.
> strangely enough this doesn't log anything in /var/log/
Indeed, that sounds really strange. arjen/sieve/ tmp/*.mail. sieve rw,
What happens if you add
/home/
to your dovecot profile and switch it back to enforce mode?