Am 02.04.19 um 18:25 schrieb Steven Monai: Hi Steven, > > So far, my buster Samba AD controller appears to be working correctly > with the 'usr.sbin.named' profile in 'complain' mode. I will monitor the > logs for a while to see if any further apparmor-related issues appear > during my testing.
I have just uploaded 1:9.11.5.P4+dfsg-3 that should incorporate all your local changes and also allowed /dev/urandom. I have upgraded my local Samba AD DC to Buster with this configuration and it appears to work fine, but this is only my personal server. The package should be built within the next couple of hours, could you please test it (ideally with all your local AppArmor overrides removed and in enforce mode). I will then ask the Release Team for a Freeze Exception. Best Regards, Bernhard