Package: kopano-dagent Version: 8.7.0-3 The default AppArmor configuration file /etc/apparmor.d/usr.sbin.kopano-dagent doesn't cover /etc/ssl/openssl.cnf
Adding "/etc/ssl/openssl.cnf r," to /etc/apparmor.d/usr.sbin.kopano-dagent seems to help. Error without the modified AppArmor policy: Aug 11 11:48:44 admailserver kernel: [24016.756487] audit: type=1400 audit(1565516924.187:212): apparmor="DENIED" operation="open" profile="/usr/sbin/kopano-dagent" name="/etc/ssl/openssl.cnf" pid=31959 comm="kopano-dagent" requested_mask="r" denied_mask="r" fsuid=110 ouid=0 Linux 4.19.0-5-amd64 #1 SMP Debian 4.19.37-5+deb10u2 (2019-08-08) x86_64 GNU/Linux
