[Bug 1783183] Re: apparmor profile denied for kerberos client keytab and credential cache files

[Andreas Hasenack]

I used this for now:
root at bionic-slapd-consumer:/etc/apparmor.d# cat local/usr.sbin.slapd 
# Site-specific additions and overrides for usr.sbin.slapd.
# For more details, please see /etc/apparmor.d/local/README.

  /etc/krb5/user/[0-9]*/client.keytab rk,
  /tmp/krb5cc_[0-9]* rwk,


I'm checking if there is some apparmor macro or variable we could use for something like "my own uid"

-- 
You received this bug notification because you are a member of Ubuntu
Server, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1783183

Title:
  apparmor profile denied for kerberos client keytab and credential
  cache files

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openldap/+bug/1783183/+subscriptions