Alan, those are some surprising errors. It looks a lot like you've got / symlinked to /mnt/stoarge0/ or something else similar.
If so, you'd probably be better served with a rule like:
alias / -> /mnt/storage0/,
in the /etc/apparmor.d/tunables/alias file.
Then you could clean up the @{HOME} variable to only the paths actually used for home directories (the dpkg-reconfigure apparmor question) and drastically tighten the security policy while also allowing the accesses that need to happen.
Alan, those are some surprising errors. It looks a lot like you've got / symlinked to /mnt/stoarge0/ or something else similar.
If so, you'd probably be better served with a rule like:
alias / -> /mnt/storage0/,
in the /etc/apparmor. d/tunables/ alias file.
Then you could clean up the @{HOME} variable to only the paths actually used for home directories (the dpkg-reconfigure apparmor question) and drastically tighten the security policy while also allowing the accesses that need to happen.
Thanks