Apparmor logged alles

Daretar

PHP Entwickler
Hallo miteinander,

leider konnte mir google nicht so wirklich weiterhelfen :/
Auf einem Debian Server logged apparmor wirklich alle Dovecot Zugriffe. Vielleicht kann mir hier jemand einen Tipp geben, wie ich das deaktivieren kann :)

Log-Auszug
Code:
Feb 24 05:02:46 *** kernel: [3090186.055913] type=1400 audit(1456286566.075:692051): apparmor="ALLOWED" operation="open" profile="/usr/lib/dovecot/imap" name="/var/customers/mail/****/*****/kontakt/Maildir/dovecot.index" pid=496 comm="imap" requested_mask="rw" denied_mask="rw" fsuid=2000 ouid=2000

apparmor_status
Code:
apparmor module is loaded.
45 profiles are loaded.
12 profiles are in enforce mode.
   /sbin/dhclient
   /usr/bin/freshclam
   /usr/lib/NetworkManager/nm-dhcp-client.action
   /usr/lib/chromium-browser/chromium-browser//browser_java
   /usr/lib/chromium-browser/chromium-browser//browser_openjdk
   /usr/lib/chromium-browser/chromium-browser//sanitized_helper
   /usr/lib/connman/scripts/dhclient-script
   /usr/sbin/clamd
   /usr/sbin/named
   /usr/sbin/ntpd
   docker-default
   system_tor
33 profiles are in complain mode.
   /sbin/klogd
   /sbin/syslog-ng
   /sbin/syslogd
   /usr/lib/chromium-browser/chromium-browser
   /usr/lib/chromium-browser/chromium-browser//chromium_browser_sandbox
   /usr/lib/chromium-browser/chromium-browser//lsb_release
   /usr/lib/chromium-browser/chromium-browser//xdgsettings
   /usr/lib/dovecot/anvil
   /usr/lib/dovecot/auth
   /usr/lib/dovecot/config
   /usr/lib/dovecot/deliver
   /usr/lib/dovecot/dict
   /usr/lib/dovecot/dovecot-auth
   /usr/lib/dovecot/dovecot-lda
   /usr/lib/dovecot/imap
   /usr/lib/dovecot/imap-login
   /usr/lib/dovecot/lmtp
   /usr/lib/dovecot/log
   /usr/lib/dovecot/managesieve
   /usr/lib/dovecot/managesieve-login
   /usr/lib/dovecot/pop3
   /usr/lib/dovecot/pop3-login
   /usr/lib/dovecot/ssl-params
   /usr/sbin/avahi-daemon
   /usr/sbin/dnsmasq
   /usr/sbin/dovecot
   /usr/sbin/identd
   /usr/sbin/mdnsd
   /usr/sbin/nmbd
   /usr/sbin/nscd
   /usr/sbin/smbd
   /usr/{sbin/traceroute,bin/traceroute.db}
   /{usr/,}bin/ping
32 processes have profiles defined.
13 processes are in enforce mode.
   /usr/bin/freshclam (3320) 
   /usr/sbin/clamd (3201) 
   /usr/sbin/named (2352) 
   /usr/sbin/ntpd (18872) 
   docker-default (4764) 
   docker-default (4851) 
   docker-default (4888) 
   docker-default (4935) 
   docker-default (4936) 
   docker-default (4937) 
   docker-default (4938) 
   docker-default (4939) 
   docker-default (4946) 
19 processes are in complain mode.
   /usr/lib/dovecot/anvil (1820) 
   /usr/lib/dovecot/auth (488) 
   /usr/lib/dovecot/auth (550) 
   /usr/lib/dovecot/config (9197) 
   /usr/lib/dovecot/imap (496) 
   /usr/lib/dovecot/imap (11527) 
   /usr/lib/dovecot/imap (29388) 
   /usr/lib/dovecot/imap (29389) 
   /usr/lib/dovecot/imap (29392) 
   /usr/lib/dovecot/imap (29393) 
   /usr/lib/dovecot/imap-login (11525) 
   /usr/lib/dovecot/imap-login (29386) 
   /usr/lib/dovecot/imap-login (29387) 
   /usr/lib/dovecot/imap-login (29390) 
   /usr/lib/dovecot/imap-login (29391) 
   /usr/lib/dovecot/log (1821) 
   /usr/lib/dovecot/ssl-params (489) 
   /usr/sbin/dovecot (1332) 
   /usr/sbin/nscd (20333) 
0 processes are unconfined but have a profile defined.
 
Back
Top