Found a few more that I'm working around as follows:
/etc/ssl/openssl.cnf r, /var/lib/sss/mc/* rwk,
[...] apparmor="ALLOWED" operation="file_lock" profile="/usr/sbin/sssd" name="/var/lib/sss/mc/passwd" pid=10407 comm="sssd_nss" requested_mask="k" denied_mask="k" fsuid=0 ouid=0 [...] apparmor="ALLOWED" operation="open" profile="/usr/sbin/sssd" name="/etc/ssl/openssl.cnf" pid=10407 comm="sssd_nss" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 [...] apparmor="ALLOWED" operation="file_lock" profile="/usr/sbin/sssd" name="/var/lib/sss/mc/group" pid=10407 comm="sssd_nss" requested_mask="k" denied_mask="k" fsuid=0 ouid=0 [...] apparmor="ALLOWED" operation="file_lock" profile="/usr/sbin/sssd" name="/var/lib/sss/mc/initgroups" pid=10407 comm="sssd_nss" requested_mask="k" denied_mask="k" fsuid=0 ouid=0
Found a few more that I'm working around as follows:
/etc/ssl/ openssl. cnf r,
/var/lib/sss/mc/* rwk,
[...] apparmor="ALLOWED" operation= "file_lock" profile= "/usr/sbin/ sssd" name="/ var/lib/ sss/mc/ passwd" pid=10407 comm="sssd_nss" requested_mask="k" denied_mask="k" fsuid=0 ouid=0 "/usr/sbin/ sssd" name="/ etc/ssl/ openssl. cnf" pid=10407 comm="sssd_nss" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 "file_lock" profile= "/usr/sbin/ sssd" name="/ var/lib/ sss/mc/ group" pid=10407 comm="sssd_nss" requested_mask="k" denied_mask="k" fsuid=0 ouid=0 "file_lock" profile= "/usr/sbin/ sssd" name="/ var/lib/ sss/mc/ initgroups" pid=10407 comm="sssd_nss" requested_mask="k" denied_mask="k" fsuid=0 ouid=0
[...] apparmor="ALLOWED" operation="open" profile=
[...] apparmor="ALLOWED" operation=
[...] apparmor="ALLOWED" operation=