Comment 1 for bug 1767101

Revision history for this message
Eugene Crosser (crosser) wrote :

The problem is in apparmor configuration:

```
audit: type=1400 audit(1524780087.048:210): apparmor="DENIED" operation="file_mmap" profile="/usr/sbin/ejabberdctl//su" name="/usr/lib/erlang/p1_pam/bin/epam" pid=25519 comm="epam" requested_mask="m" denied_mask="m" fsuid=0 ouid=0
```

`mmap` permission needs to be specified for the epam suid binary helper.
Attached patch fixes the problem, pam authentication starts to work.