Well, may be this is not bug, but expected behaviour.
/etc/apparmor.d/usr.sbin.ejabberdctl contains /usr/sbin/ejabberdctl { .... profile su { ... } } I.e. there is profile su inside. If I add: /usr/sbin/ejabberdctl flags=(complain) { it doesn't change profile su behaviour. I have to add profile su flags=(complain) { then it works. Problem here is that it breaks idea of scope, because profile su is _inside_, but does not use flags from outside. Thank you! -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1700231 Title: 16.04 , apparmor denies dbus communications even with flags=(complain) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1700231/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs