diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/bin.netstat apparmor-2.13-mod/profiles/apparmor/profiles/extras/bin.netstat
--- apparmor-2.13/profiles/apparmor/profiles/extras/bin.netstat 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/bin.netstat 2018-08-04 21:50:34.414133541 +0530
@@ -15,7 +15,7 @@
#include <tunables/global>
-profile netstat /{usr/,}bin/netstat {
+profile netstat /{usr/,}bin/netstat flags=(complain) {
#include <abstractions/base>
#include <abstractions/consoles>
#include <abstractions/nameservice>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/etc.cron.daily.logrotate apparmor-2.13-mod/profiles/apparmor/profiles/extras/etc.cron.daily.logrotate
--- apparmor-2.13/profiles/apparmor/profiles/extras/etc.cron.daily.logrotate 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/etc.cron.daily.logrotate 2018-08-04 21:50:34.422133541 +0530
@@ -13,7 +13,7 @@
#include <tunables/global>
-/etc/cron.daily/logrotate {
+/etc/cron.daily/logrotate flags=(complain) {
#include <abstractions/base>
#include <abstractions/bash>
#include <abstractions/nameservice>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/etc.cron.daily.slocate.cron apparmor-2.13-mod/profiles/apparmor/profiles/extras/etc.cron.daily.slocate.cron
--- apparmor-2.13/profiles/apparmor/profiles/extras/etc.cron.daily.slocate.cron 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/etc.cron.daily.slocate.cron 2018-08-04 21:50:34.422133541 +0530
@@ -14,7 +14,7 @@
#include <tunables/global>
-/etc/cron.daily/slocate.cron {
+/etc/cron.daily/slocate.cron flags=(complain) {
#include <abstractions/base>
/{usr/,}bin/bash mixr,
/dev/tty wr ,
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/etc.cron.daily.tmpwatch apparmor-2.13-mod/profiles/apparmor/profiles/extras/etc.cron.daily.tmpwatch
--- apparmor-2.13/profiles/apparmor/profiles/extras/etc.cron.daily.tmpwatch 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/etc.cron.daily.tmpwatch 2018-08-04 21:50:34.430133540 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-/etc/cron.daily/tmpwatch {
+/etc/cron.daily/tmpwatch flags=(complain) {
#include <abstractions/base>
/etc/cron.daily/tmpwatch r,
/tmp r,
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/sbin.dhclient apparmor-2.13-mod/profiles/apparmor/profiles/extras/sbin.dhclient
--- apparmor-2.13/profiles/apparmor/profiles/extras/sbin.dhclient 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/sbin.dhclient 2018-08-04 21:50:34.418133541 +0530
@@ -21,7 +21,7 @@
#include <tunables/global>
-profile dhclient /{usr/,}sbin/dhclient {
+profile dhclient /{usr/,}sbin/dhclient flags=(complain) {
#include <abstractions/base>
#include <abstractions/bash>
#include <abstractions/nameservice>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/sbin.dhclient-script apparmor-2.13-mod/profiles/apparmor/profiles/extras/sbin.dhclient-script
--- apparmor-2.13/profiles/apparmor/profiles/extras/sbin.dhclient-script 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/sbin.dhclient-script 2018-08-04 21:50:34.414133541 +0530
@@ -4,7 +4,7 @@
# dhclient-script will call plugins from /etc/netconfig.d, so this
# will need to be extended on a per-site basis.
-profile dhclient-script /{usr/,}sbin/dhclient-script {
+profile dhclient-script /{usr/,}sbin/dhclient-script flags=(complain) {
#include <abstractions/base>
#include <abstractions/bash>
#include <abstractions/consoles>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/sbin.dhcpcd apparmor-2.13-mod/profiles/apparmor/profiles/extras/sbin.dhcpcd
--- apparmor-2.13/profiles/apparmor/profiles/extras/sbin.dhcpcd 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/sbin.dhcpcd 2018-08-04 21:50:34.418133541 +0530
@@ -18,7 +18,7 @@
#include <tunables/global>
-profile dhcpcd /{usr/,}sbin/dhcpcd {
+profile dhcpcd /{usr/,}sbin/dhcpcd flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/sbin.portmap apparmor-2.13-mod/profiles/apparmor/profiles/extras/sbin.portmap
--- apparmor-2.13/profiles/apparmor/profiles/extras/sbin.portmap 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/sbin.portmap 2018-08-04 21:50:34.430133540 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-profile portmap /{usr/,}sbin/portmap {
+profile portmap /{usr/,}sbin/portmap flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/sbin.resmgrd apparmor-2.13-mod/profiles/apparmor/profiles/extras/sbin.resmgrd
--- apparmor-2.13/profiles/apparmor/profiles/extras/sbin.resmgrd 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/sbin.resmgrd 2018-08-04 21:50:34.426133540 +0530
@@ -12,7 +12,7 @@
#include <tunables/global>
-profile resmgrd /{usr/,}sbin/resmgrd {
+profile resmgrd /{usr/,}sbin/resmgrd flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/sbin.rpc.lockd apparmor-2.13-mod/profiles/apparmor/profiles/extras/sbin.rpc.lockd
--- apparmor-2.13/profiles/apparmor/profiles/extras/sbin.rpc.lockd 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/sbin.rpc.lockd 2018-08-04 21:50:34.422133541 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-profile rpc.lockd /{usr/,}sbin/rpc.lockd {
+profile rpc.lockd /{usr/,}sbin/rpc.lockd flags=(complain) {
#include <abstractions/base>
/{usr/,}sbin/rpc.lockd rmix,
}
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/sbin.rpc.statd apparmor-2.13-mod/profiles/apparmor/profiles/extras/sbin.rpc.statd
--- apparmor-2.13/profiles/apparmor/profiles/extras/sbin.rpc.statd 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/sbin.rpc.statd 2018-08-04 21:50:34.422133541 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-profile rpc.statd /{usr/,}sbin/rpc.statd {
+profile rpc.statd /{usr/,}sbin/rpc.statd flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
/etc/rpc r,
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.acroread apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.acroread
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.acroread 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.acroread 2018-08-04 21:50:34.426133540 +0530
@@ -12,7 +12,7 @@
#include <tunables/global>
-/usr/X11R6/bin/acroread {
+/usr/X11R6/bin/acroread flags=(complain) {
#include <abstractions/base>
#include <abstractions/bash>
#include <abstractions/consoles>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.apropos apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.apropos
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.apropos 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.apropos 2018-08-04 21:50:34.422133541 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-/usr/bin/apropos {
+/usr/bin/apropos flags=(complain) {
#include <abstractions/base>
#include <abstractions/bash>
#include <abstractions/consoles>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.evolution-2.10 apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.evolution-2.10
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.evolution-2.10 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.evolution-2.10 2018-08-04 21:50:34.414133541 +0530
@@ -40,7 +40,7 @@
#include <tunables/global>
-/usr/bin/evolution-2.10 {
+/usr/bin/evolution-2.10 flags=(complain) {
#include <abstractions/base>
#include <abstractions/bash>
#include <abstractions/consoles>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.fam apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.fam
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.fam 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.fam 2018-08-04 21:50:34.414133541 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-/usr/bin/fam {
+/usr/bin/fam flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
/tmp/.fam* wl,
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.freshclam apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.freshclam
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.freshclam 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.freshclam 2018-08-04 21:50:34.418133541 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-/usr/bin/freshclam {
+/usr/bin/freshclam flags=(complain) {
#include <abstractions/base>
#include <abstractions/consoles>
#include <abstractions/nameservice>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.gaim apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.gaim
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.gaim 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.gaim 2018-08-04 21:50:34.414133541 +0530
@@ -12,7 +12,7 @@
#include <tunables/global>
-/usr/bin/gaim {
+/usr/bin/gaim flags=(complain) {
#include <abstractions/audio>
#include <abstractions/base>
#include <abstractions/bash>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.man apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.man
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.man 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.man 2018-08-04 21:50:34.422133541 +0530
@@ -14,7 +14,7 @@
#include <tunables/global>
-/usr/bin/man {
+/usr/bin/man flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.mlmmj-bounce apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.mlmmj-bounce
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.mlmmj-bounce 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.mlmmj-bounce 2018-08-04 21:50:34.426133540 +0530
@@ -12,7 +12,7 @@
#include <tunables/global>
-/usr/bin/mlmmj-bounce {
+/usr/bin/mlmmj-bounce flags=(complain) {
#include <abstractions/base>
/usr/bin/mlmmj-bounce mr,
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.mlmmj-maintd apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.mlmmj-maintd
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.mlmmj-maintd 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.mlmmj-maintd 2018-08-04 21:50:34.418133541 +0530
@@ -12,7 +12,7 @@
#include <tunables/global>
-/usr/bin/mlmmj-maintd {
+/usr/bin/mlmmj-maintd flags=(complain) {
#include <abstractions/base>
capability setuid,
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.mlmmj-make-ml.sh apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.mlmmj-make-ml.sh
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.mlmmj-make-ml.sh 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.mlmmj-make-ml.sh 2018-08-04 21:50:34.426133540 +0530
@@ -11,7 +11,7 @@
#include <tunables/global>
-/usr/bin/mlmmj-make-ml.sh {
+/usr/bin/mlmmj-make-ml.sh flags=(complain) {
#include <abstractions/base>
#include <abstractions/bash>
#include <abstractions/consoles>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.mlmmj-process apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.mlmmj-process
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.mlmmj-process 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.mlmmj-process 2018-08-04 21:50:34.414133541 +0530
@@ -12,7 +12,7 @@
#include <tunables/global>
-/usr/bin/mlmmj-process {
+/usr/bin/mlmmj-process flags=(complain) {
#include <abstractions/base>
/usr/bin/mlmmj-process mr,
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.mlmmj-receive apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.mlmmj-receive
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.mlmmj-receive 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.mlmmj-receive 2018-08-04 21:50:34.426133540 +0530
@@ -12,7 +12,7 @@
#include <tunables/global>
-/usr/bin/mlmmj-receive {
+/usr/bin/mlmmj-receive flags=(complain) {
#include <abstractions/base>
/usr/bin/mlmmj-process Px,
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.mlmmj-recieve apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.mlmmj-recieve
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.mlmmj-recieve 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.mlmmj-recieve 2018-08-04 21:50:34.422133541 +0530
@@ -16,7 +16,7 @@
#include <tunables/global>
-/usr/bin/mlmmj-recieve {
+/usr/bin/mlmmj-recieve flags=(complain) {
#include <abstractions/base>
/usr/bin/mlmmj-process Px,
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.mlmmj-send apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.mlmmj-send
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.mlmmj-send 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.mlmmj-send 2018-08-04 21:50:34.422133541 +0530
@@ -12,7 +12,7 @@
#include <tunables/global>
-/usr/bin/mlmmj-send {
+/usr/bin/mlmmj-send flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.mlmmj-sub apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.mlmmj-sub
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.mlmmj-sub 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.mlmmj-sub 2018-08-04 21:50:34.426133540 +0530
@@ -12,7 +12,7 @@
#include <tunables/global>
-/usr/bin/mlmmj-sub {
+/usr/bin/mlmmj-sub flags=(complain) {
#include <abstractions/base>
capability setuid,
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.mlmmj-unsub apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.mlmmj-unsub
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.mlmmj-unsub 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.mlmmj-unsub 2018-08-04 21:50:34.426133540 +0530
@@ -12,7 +12,7 @@
#include <tunables/global>
-/usr/bin/mlmmj-unsub {
+/usr/bin/mlmmj-unsub flags=(complain) {
#include <abstractions/base>
/usr/bin/mlmmj-unsub mr,
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.opera apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.opera
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.opera 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.opera 2018-08-04 21:50:34.426133540 +0530
@@ -10,7 +10,7 @@
# vim:syntax=apparmor
#include <tunables/global>
-/usr/bin/opera {
+/usr/bin/opera flags=(complain) {
#include <abstractions/base>
#include <abstractions/bash>
#include <abstractions/consoles>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.passwd apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.passwd
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.passwd 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.passwd 2018-08-04 21:50:34.414133541 +0530
@@ -11,7 +11,7 @@
#include <tunables/global>
-/usr/bin/passwd {
+/usr/bin/passwd flags=(complain) {
#include <abstractions/authentication>
#include <abstractions/base>
#include <abstractions/consoles>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.procmail apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.procmail
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.procmail 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.procmail 2018-08-04 21:50:34.418133541 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-/usr/bin/procmail {
+/usr/bin/procmail flags=(complain) {
#include <abstractions/base>
#include <abstractions/bash>
#include <abstractions/nameservice>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.spamc apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.spamc
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.spamc 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.spamc 2018-08-04 21:50:34.426133540 +0530
@@ -12,7 +12,7 @@
#include <tunables/global>
-/usr/bin/spamc {
+/usr/bin/spamc flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.svnserve apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.svnserve
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.svnserve 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.svnserve 2018-08-04 21:50:34.418133541 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-/usr/bin/svnserve {
+/usr/bin/svnserve flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.wireshark apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.wireshark
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.wireshark 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.wireshark 2018-08-04 21:50:34.422133541 +0530
@@ -12,7 +12,7 @@
#include <tunables/global>
-/usr/bin/wireshark {
+/usr/bin/wireshark flags=(complain) {
#include <abstractions/base>
#include <abstractions/bash>
#include <abstractions/consoles>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.xfs apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.xfs
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.bin.xfs 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.bin.xfs 2018-08-04 21:50:34.418133541 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-/usr/bin/xfs {
+/usr/bin/xfs flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib64.GConf.2.gconfd-2 apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib64.GConf.2.gconfd-2
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib64.GConf.2.gconfd-2 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib64.GConf.2.gconfd-2 2018-08-04 21:50:34.426133540 +0530
@@ -12,7 +12,7 @@
#include <tunables/global>
-/usr/lib64/GConf/2/gconfd-2 {
+/usr/lib64/GConf/2/gconfd-2 flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/user-tmp>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.bonobo.bonobo-activation-server apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.bonobo.bonobo-activation-server
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.bonobo.bonobo-activation-server 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.bonobo.bonobo-activation-server 2018-08-04 21:50:34.418133541 +0530
@@ -12,7 +12,7 @@
#include <tunables/global>
-/usr/lib/bonobo/bonobo-activation-server {
+/usr/lib/bonobo/bonobo-activation-server flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/user-tmp>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.evolution-data-server.evolution-data-server-1.10 apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.evolution-data-server.evolution-data-server-1.10
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.evolution-data-server.evolution-data-server-1.10 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.evolution-data-server.evolution-data-server-1.10 2018-08-04 21:50:34.422133541 +0530
@@ -12,7 +12,7 @@
#include <tunables/global>
-/usr/lib/evolution-data-server/evolution-data-server-1.10 {
+/usr/lib/evolution-data-server/evolution-data-server-1.10 flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/user-tmp>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.firefox.firefox apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.firefox.firefox
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.firefox.firefox 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.firefox.firefox 2018-08-04 21:50:34.414133541 +0530
@@ -16,7 +16,7 @@
# /usr/lib/firefox-4.0b8/firefox
# but not:
# /usr/lib/firefox-4.0b8/firefox.sh
-/usr/lib/firefox{,-[0-9]*}/firefox{,*[^s][^h]} {
+/usr/lib/firefox{,-[0-9]*}/firefox{,*[^s][^h]} flags=(complain) {
#include <abstractions/audio>
#include <abstractions/cups-client>
#include <abstractions/dbus-session>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.firefox.firefox.sh apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.firefox.firefox.sh
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.firefox.firefox.sh 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.firefox.firefox.sh 2018-08-04 21:50:34.426133540 +0530
@@ -1,7 +1,7 @@
# Last Modified: Wed Nov 5 03:32:59 2008
#include <tunables/global>
-/usr/lib/firefox/firefox.sh {
+/usr/lib/firefox/firefox.sh flags=(complain) {
#include <abstractions/base>
#include <abstractions/bash>
#include <abstractions/consoles>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.firefox.mozilla-xremote-client apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.firefox.mozilla-xremote-client
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.firefox.mozilla-xremote-client 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.firefox.mozilla-xremote-client 2018-08-04 21:50:34.426133540 +0530
@@ -12,7 +12,7 @@
#include <tunables/global>
-/usr/lib/firefox/mozilla-xremote-client {
+/usr/lib/firefox/mozilla-xremote-client flags=(complain) {
#include <abstractions/base>
#include <abstractions/X>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.GConf.2.gconfd-2 apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.GConf.2.gconfd-2
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.GConf.2.gconfd-2 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.GConf.2.gconfd-2 2018-08-04 21:50:34.418133541 +0530
@@ -12,7 +12,7 @@
#include <tunables/global>
-/usr/lib/GConf/2/gconfd-2 {
+/usr/lib/GConf/2/gconfd-2 flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/user-tmp>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.man-db.man apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.man-db.man
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.man-db.man 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.man-db.man 2018-08-04 21:50:34.422133541 +0530
@@ -11,7 +11,7 @@
#include <tunables/global>
-/usr/lib/man-db/man {
+/usr/lib/man-db/man flags=(complain) {
#include <abstractions/base>
#include <abstractions/bash>
#include <abstractions/consoles>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.anvil apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.anvil
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.anvil 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.anvil 2018-08-04 21:50:34.422133541 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-/usr/lib/postfix/anvil {
+/usr/lib/postfix/anvil flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/postfix-common>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.bounce apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.bounce
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.bounce 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.bounce 2018-08-04 21:50:34.426133540 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-/usr/lib/postfix/bounce {
+/usr/lib/postfix/bounce flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/postfix-common>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.cleanup apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.cleanup
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.cleanup 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.cleanup 2018-08-04 21:50:34.414133541 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-/usr/lib/postfix/cleanup {
+/usr/lib/postfix/cleanup flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/postfix-common>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.discard apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.discard
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.discard 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.discard 2018-08-04 21:50:34.422133541 +0530
@@ -11,7 +11,7 @@
#include <tunables/global>
-/usr/lib/postfix/discard {
+/usr/lib/postfix/discard flags=(complain) {
#include <abstractions/base>
/usr/lib/postfix/discard rmix,
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.error apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.error
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.error 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.error 2018-08-04 21:50:34.418133541 +0530
@@ -11,7 +11,7 @@
#include <tunables/global>
-/usr/lib/postfix/error {
+/usr/lib/postfix/error flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/postfix-common>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.flush apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.flush
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.flush 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.flush 2018-08-04 21:50:34.422133541 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-/usr/lib/postfix/flush {
+/usr/lib/postfix/flush flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/postfix-common>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.lmtp apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.lmtp
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.lmtp 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.lmtp 2018-08-04 21:50:34.414133541 +0530
@@ -11,7 +11,7 @@
#include <tunables/global>
-/usr/lib/postfix/lmtp {
+/usr/lib/postfix/lmtp flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/postfix-common>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.local apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.local
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.local 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.local 2018-08-04 21:50:34.426133540 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-/usr/lib/postfix/local {
+/usr/lib/postfix/local flags=(complain) {
#include <abstractions/base>
#include <abstractions/bash>
#include <abstractions/nameservice>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.master apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.master
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.master 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.master 2018-08-04 21:50:34.418133541 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-/usr/lib/postfix/master {
+/usr/lib/postfix/master flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/postfix-common>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.nqmgr apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.nqmgr
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.nqmgr 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.nqmgr 2018-08-04 21:50:34.414133541 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-/usr/lib/postfix/nqmgr {
+/usr/lib/postfix/nqmgr flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/postfix-common>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.oqmgr apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.oqmgr
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.oqmgr 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.oqmgr 2018-08-04 21:50:34.426133540 +0530
@@ -11,7 +11,7 @@
#include <tunables/global>
-/usr/lib/postfix/oqmgr {
+/usr/lib/postfix/oqmgr flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/postfix-common>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.pickup apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.pickup
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.pickup 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.pickup 2018-08-04 21:50:34.414133541 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-/usr/lib/postfix/pickup {
+/usr/lib/postfix/pickup flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/postfix-common>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.pipe apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.pipe
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.pipe 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.pipe 2018-08-04 21:50:34.410133541 +0530
@@ -11,7 +11,7 @@
#include <tunables/global>
-/usr/lib/postfix/pipe {
+/usr/lib/postfix/pipe flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/postfix-common>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.proxymap apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.proxymap
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.proxymap 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.proxymap 2018-08-04 21:50:34.418133541 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-/usr/lib/postfix/proxymap {
+/usr/lib/postfix/proxymap flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/postfix-common>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.qmgr apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.qmgr
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.qmgr 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.qmgr 2018-08-04 21:50:34.422133541 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-/usr/lib/postfix/qmgr {
+/usr/lib/postfix/qmgr flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/postfix-common>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.qmqpd apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.qmqpd
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.qmqpd 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.qmqpd 2018-08-04 21:50:34.418133541 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-/usr/lib/postfix/qmqpd {
+/usr/lib/postfix/qmqpd flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/postfix-common>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.scache apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.scache
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.scache 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.scache 2018-08-04 21:50:34.418133541 +0530
@@ -12,7 +12,7 @@
#include <tunables/global>
-/usr/lib/postfix/scache {
+/usr/lib/postfix/scache flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/postfix-common>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.showq apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.showq
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.showq 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.showq 2018-08-04 21:50:34.414133541 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-/usr/lib/postfix/showq {
+/usr/lib/postfix/showq flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/postfix-common>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.smtp apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.smtp
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.smtp 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.smtp 2018-08-04 21:50:34.414133541 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-/usr/lib/postfix/smtp {
+/usr/lib/postfix/smtp flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/postfix-common>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.smtpd apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.smtpd
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.smtpd 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.smtpd 2018-08-04 21:50:34.418133541 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-/usr/lib/postfix/smtpd {
+/usr/lib/postfix/smtpd flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/postfix-common>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.spawn apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.spawn
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.spawn 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.spawn 2018-08-04 21:50:34.426133540 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-/usr/lib/postfix/spawn {
+/usr/lib/postfix/spawn flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/postfix-common>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.tlsmgr apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.tlsmgr
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.tlsmgr 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.tlsmgr 2018-08-04 21:50:34.422133541 +0530
@@ -11,7 +11,7 @@
#include <tunables/global>
-/usr/lib/postfix/tlsmgr {
+/usr/lib/postfix/tlsmgr flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/postfix-common>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.trivial-rewrite apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.trivial-rewrite
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.trivial-rewrite 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.trivial-rewrite 2018-08-04 21:50:34.422133541 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-/usr/lib/postfix/trivial-rewrite {
+/usr/lib/postfix/trivial-rewrite flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/postfix-common>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.verify apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.verify
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.verify 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.verify 2018-08-04 21:50:34.414133541 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-/usr/lib/postfix/verify {
+/usr/lib/postfix/verify flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/postfix-common>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.virtual apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.virtual
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.postfix.virtual 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.postfix.virtual 2018-08-04 21:50:34.426133540 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-/usr/lib/postfix/virtual {
+/usr/lib/postfix/virtual flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/postfix-common>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.RealPlayer10.realplay apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.RealPlayer10.realplay
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.lib.RealPlayer10.realplay 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.lib.RealPlayer10.realplay 2018-08-04 21:50:34.422133541 +0530
@@ -12,7 +12,7 @@
#include <tunables/global>
-/usr/lib/RealPlayer10/realplay {
+/usr/lib/RealPlayer10/realplay flags=(complain) {
#include <abstractions/base>
#include <abstractions/bash>
#include <abstractions/consoles>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.NX.bin.nxclient apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.NX.bin.nxclient
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.NX.bin.nxclient 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.NX.bin.nxclient 2018-08-04 21:50:34.418133541 +0530
@@ -11,7 +11,7 @@
#include <tunables/global>
-/usr/NX/bin/nxclient {
+/usr/NX/bin/nxclient flags=(complain) {
#include <abstractions/base>
#include <abstractions/bash>
#include <abstractions/consoles>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.cupsd apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.cupsd
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.cupsd 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.cupsd 2018-08-04 21:50:34.422133541 +0530
@@ -1,6 +1,6 @@
# Last Modified: Sun Sep 16 18:11:15 2007
#include <tunables/global>
-/usr/sbin/cupsd {
+/usr/sbin/cupsd flags=(complain) {
#include <abstractions/base>
#include <abstractions/bash>
#include <abstractions/dbus>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.dhcpd apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.dhcpd
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.dhcpd 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.dhcpd 2018-08-04 21:50:34.422133541 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-/usr/sbin/dhcpd {
+/usr/sbin/dhcpd flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.httpd2-prefork apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.httpd2-prefork
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.httpd2-prefork 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.httpd2-prefork 2018-08-04 21:50:34.426133540 +0530
@@ -11,7 +11,7 @@
#include <tunables/global>
-/usr/sbin/httpd2-prefork {
+/usr/sbin/httpd2-prefork flags=(complain) {
#include <abstractions/apache2-common>
#include <abstractions/base>
#include <abstractions/consoles>
@@ -129,12 +129,12 @@
/var/lib/php/sess_* rwl,
- ^HANDLING_UNTRUSTED_INPUT {
+ ^HANDLING_UNTRUSTED_INPUT flags=(complain) {
#include <abstractions/apache2-common>
/var/log/apache2/* w,
}
- ^DEFAULT_URI {
+ ^DEFAULT_URI flags=(complain) {
#include <abstractions/apache2-common>
#include <abstractions/base>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.imapd apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.imapd
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.imapd 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.imapd 2018-08-04 21:50:34.426133540 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-/usr/sbin/imapd {
+/usr/sbin/imapd flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/authentication>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.in.fingerd apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.in.fingerd
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.in.fingerd 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.in.fingerd 2018-08-04 21:50:34.426133540 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-/usr/sbin/in.fingerd {
+/usr/sbin/in.fingerd flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.in.ftpd apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.in.ftpd
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.in.ftpd 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.in.ftpd 2018-08-04 21:50:34.426133540 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-/usr/sbin/in.ftpd {
+/usr/sbin/in.ftpd flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/authentication>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.in.ntalkd apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.in.ntalkd
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.in.ntalkd 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.in.ntalkd 2018-08-04 21:50:34.426133540 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-/usr/sbin/in.ntalkd {
+/usr/sbin/in.ntalkd flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/consoles>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.ipop2d apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.ipop2d
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.ipop2d 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.ipop2d 2018-08-04 21:50:34.414133541 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-/usr/sbin/ipop2d {
+/usr/sbin/ipop2d flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/authentication>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.ipop3d apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.ipop3d
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.ipop3d 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.ipop3d 2018-08-04 21:50:34.422133541 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-/usr/sbin/ipop3d {
+/usr/sbin/ipop3d flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/authentication>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.lighttpd apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.lighttpd
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.lighttpd 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.lighttpd 2018-08-04 21:50:34.426133540 +0530
@@ -11,7 +11,7 @@
#include <tunables/global>
-/usr/sbin/lighttpd {
+/usr/sbin/lighttpd flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/web-data>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.mysqld apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.mysqld
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.mysqld 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.mysqld 2018-08-04 21:50:34.418133541 +0530
@@ -14,7 +14,7 @@
#include <tunables/global>
-/usr/sbin/mysqld {
+/usr/sbin/mysqld flags=(complain) {
#include <abstractions/base>
#include <abstractions/mysql>
#include <abstractions/nameservice>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.nmbd apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.nmbd
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.nmbd 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.nmbd 2018-08-04 21:50:34.418133541 +0530
@@ -12,7 +12,7 @@
#include <tunables/global>
-/usr/sbin/nmbd {
+/usr/sbin/nmbd flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.oidentd apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.oidentd
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.oidentd 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.oidentd 2018-08-04 21:50:34.418133541 +0530
@@ -11,7 +11,7 @@
#include <tunables/global>
-/usr/sbin/oidentd {
+/usr/sbin/oidentd flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.popper apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.popper
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.popper 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.popper 2018-08-04 21:50:34.414133541 +0530
@@ -11,7 +11,7 @@
# Last Modified: Wed Aug 31 11:14:09 2005
#include <tunables/global>
-/usr/sbin/popper {
+/usr/sbin/popper flags=(complain) {
#include <abstractions/authentication>
#include <abstractions/base>
#include <abstractions/nameservice>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.postalias apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.postalias
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.postalias 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.postalias 2018-08-04 21:50:34.430133540 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-/usr/sbin/postalias {
+/usr/sbin/postalias flags=(complain) {
#include <abstractions/base>
#include <abstractions/kerberosclient>
#include <abstractions/nameservice>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.postdrop apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.postdrop
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.postdrop 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.postdrop 2018-08-04 21:50:34.430133540 +0530
@@ -11,7 +11,7 @@
#include <tunables/global>
-/usr/sbin/postdrop {
+/usr/sbin/postdrop flags=(complain) {
#include <abstractions/base>
#include <abstractions/kerberosclient>
#include <abstractions/nameservice>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.postmap apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.postmap
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.postmap 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.postmap 2018-08-04 21:50:34.422133541 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-/usr/sbin/postmap {
+/usr/sbin/postmap flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/kerberosclient>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.postqueue apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.postqueue
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.postqueue 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.postqueue 2018-08-04 21:50:34.418133541 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-/usr/sbin/postqueue {
+/usr/sbin/postqueue flags=(complain) {
#include <abstractions/base>
#include <abstractions/consoles>
#include <abstractions/nameservice>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.sendmail apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.sendmail
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.sendmail 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.sendmail 2018-08-04 21:50:34.426133540 +0530
@@ -13,7 +13,7 @@
#include <tunables/global>
-/usr/sbin/sendmail {
+/usr/sbin/sendmail flags=(complain) {
#include <abstractions/base>
#include <abstractions/consoles>
#include <abstractions/kerberosclient>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.sendmail.postfix apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.sendmail.postfix
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.sendmail.postfix 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.sendmail.postfix 2018-08-04 21:50:34.418133541 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-/usr/sbin/sendmail.postfix {
+/usr/sbin/sendmail.postfix flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/consoles>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.sendmail.sendmail apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.sendmail.sendmail
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.sendmail.sendmail 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.sendmail.sendmail 2018-08-04 21:50:34.422133541 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-/usr/sbin/sendmail.sendmail {
+/usr/sbin/sendmail.sendmail flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.smbd apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.smbd
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.smbd 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.smbd 2018-08-04 21:50:34.418133541 +0530
@@ -12,7 +12,7 @@
#include <tunables/global>
-/usr/sbin/smbd {
+/usr/sbin/smbd flags=(complain) {
#include <abstractions/base>
#include <abstractions/bash>
#include <abstractions/nameservice>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.spamd apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.spamd
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.spamd 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.spamd 2018-08-04 21:50:34.414133541 +0530
@@ -12,7 +12,7 @@
#include <tunables/global>
-/usr/sbin/spamd {
+/usr/sbin/spamd flags=(complain) {
#include <abstractions/authentication>
#include <abstractions/base>
#include <abstractions/nameservice>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.squid apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.squid
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.squid 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.squid 2018-08-04 21:50:34.422133541 +0530
@@ -11,7 +11,7 @@
#include <tunables/global>
-/usr/sbin/squid {
+/usr/sbin/squid flags=(complain) {
#include <abstractions/base>
#include <abstractions/consoles>
#include <abstractions/kerberosclient>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.sshd apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.sshd
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.sshd 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.sshd 2018-08-04 21:50:34.414133541 +0530
@@ -16,7 +16,7 @@
#include <tunables/global>
-/usr/sbin/sshd {
+/usr/sbin/sshd flags=(complain) {
#include <abstractions/authentication>
#include <abstractions/base>
#include <abstractions/consoles>
@@ -98,7 +98,7 @@
# to set memory protection for passwd
@{PROC}/@{pid}/task/@{pid}/attr/exec w,
- profile passwd {
+ profile passwd flags=(complain) {
#include <abstractions/authentication>
#include <abstractions/base>
#include <abstractions/nameservice>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.useradd apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.useradd
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.useradd 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.useradd 2018-08-04 21:50:34.418133541 +0530
@@ -11,7 +11,7 @@
#include <tunables/global>
-/usr/sbin/useradd {
+/usr/sbin/useradd flags=(complain) {
#include <abstractions/authentication>
#include <abstractions/base>
#include <abstractions/bash>
@@ -59,7 +59,7 @@
/{,var/}run/nscd.pid rw,
/var/spool/mail/* rw,
- profile pam_tally2 {
+ profile pam_tally2 flags=(complain) {
#include <abstractions/base>
#include <abstractions/consoles>
#include <abstractions/nameservice>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.userdel apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.userdel
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.userdel 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.userdel 2018-08-04 21:50:34.414133541 +0530
@@ -11,7 +11,7 @@
#include <tunables/global>
-/usr/sbin/userdel {
+/usr/sbin/userdel flags=(complain) {
#include <abstractions/authentication>
#include <abstractions/base>
#include <abstractions/bash>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.vsftpd apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.vsftpd
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.vsftpd 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.vsftpd 2018-08-04 21:50:34.418133541 +0530
@@ -11,7 +11,7 @@
#include <tunables/global>
-/usr/sbin/vsftpd {
+/usr/sbin/vsftpd flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/authentication>
diff -Naur apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.xinetd apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.xinetd
--- apparmor-2.13/profiles/apparmor/profiles/extras/usr.sbin.xinetd 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor/profiles/extras/usr.sbin.xinetd 2018-08-04 21:50:34.418133541 +0530
@@ -10,7 +10,7 @@
#include <tunables/global>
-/usr/sbin/xinetd {
+/usr/sbin/xinetd flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
diff -Naur apparmor-2.13/profiles/apparmor.d/abstractions/launchpad-integration apparmor-2.13-mod/profiles/apparmor.d/abstractions/launchpad-integration
--- apparmor-2.13/profiles/apparmor.d/abstractions/launchpad-integration 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor.d/abstractions/launchpad-integration 2018-08-04 21:52:13.374128584 +0530
@@ -3,7 +3,7 @@
# Launchpad integration should run in a sanitizing profile
/usr/bin/launchpad-integration Cxr -> launchpad_integration,
- profile launchpad_integration {
+ profile launchpad_integration flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/ubuntu-browsers>
diff -Naur apparmor-2.13/profiles/apparmor.d/abstractions/ubuntu-browsers.d/java apparmor-2.13-mod/profiles/apparmor.d/abstractions/ubuntu-browsers.d/java
--- apparmor-2.13/profiles/apparmor.d/abstractions/ubuntu-browsers.d/java 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor.d/abstractions/ubuntu-browsers.d/java 2018-08-04 21:52:13.366128584 +0530
@@ -17,7 +17,7 @@
# Profile for the supported OpenJDK in Ubuntu. This doesn't require the
# unfortunate workarounds of the proprietary Javas, so have a separate
# profile.
- profile browser_openjdk {
+ profile browser_openjdk flags=(complain) {
#include <abstractions/base>
#include <abstractions/fonts>
#include <abstractions/gnome>
@@ -62,7 +62,7 @@
# Profile for commercial Javas. These need workarounds to work right (eg
# Sun's forcing of an executable stack (LP: #535247)).
- profile browser_java {
+ profile browser_java flags=(complain) {
#include <abstractions/base>
#include <abstractions/fonts>
#include <abstractions/gnome>
diff -Naur apparmor-2.13/profiles/apparmor.d/abstractions/ubuntu-helpers apparmor-2.13-mod/profiles/apparmor.d/abstractions/ubuntu-helpers
--- apparmor-2.13/profiles/apparmor.d/abstractions/ubuntu-helpers 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor.d/abstractions/ubuntu-helpers 2018-08-04 21:52:13.374128584 +0530
@@ -31,7 +31,7 @@
# Use at your own risk. This profile was developed as an interim workaround for
# LP: #851986 until AppArmor utilizes proper environment filtering.
-profile sanitized_helper {
+profile sanitized_helper flags=(complain) {
#include <abstractions/base>
#include <abstractions/X>
diff -Naur apparmor-2.13/profiles/apparmor.d/apache2.d/phpsysinfo apparmor-2.13-mod/profiles/apparmor.d/apache2.d/phpsysinfo
--- apparmor-2.13/profiles/apparmor.d/apache2.d/phpsysinfo 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor.d/apache2.d/phpsysinfo 2018-08-04 21:52:13.378128584 +0530
@@ -1,7 +1,7 @@
# Last Modified: Fri Sep 11 13:27:22 2009
# Author: Marc Deslauriers <marc.deslauriers@ubuntu.com>
- ^phpsysinfo {
+ ^phpsysinfo flags=(complain) {
#include <abstractions/apache2-common>
#include <abstractions/base>
#include <abstractions/nameservice>
diff -Naur apparmor-2.13/profiles/apparmor.d/bin.ping apparmor-2.13-mod/profiles/apparmor.d/bin.ping
--- apparmor-2.13/profiles/apparmor.d/bin.ping 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor.d/bin.ping 2018-08-04 21:52:13.378128584 +0530
@@ -10,7 +10,7 @@
# ------------------------------------------------------------------
#include <tunables/global>
-profile ping /{usr/,}bin/ping {
+profile ping /{usr/,}bin/ping flags=(complain) {
#include <abstractions/base>
#include <abstractions/consoles>
#include <abstractions/nameservice>
diff -Naur apparmor-2.13/profiles/apparmor.d/sbin.klogd apparmor-2.13-mod/profiles/apparmor.d/sbin.klogd
--- apparmor-2.13/profiles/apparmor.d/sbin.klogd 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor.d/sbin.klogd 2018-08-04 21:52:13.362128584 +0530
@@ -11,7 +11,7 @@
#include <tunables/global>
-profile klogd /{usr/,}sbin/klogd {
+profile klogd /{usr/,}sbin/klogd flags=(complain) {
#include <abstractions/base>
capability sys_admin, # for backward compatibility with kernel <= 2.6.37
diff -Naur apparmor-2.13/profiles/apparmor.d/sbin.syslogd apparmor-2.13-mod/profiles/apparmor.d/sbin.syslogd
--- apparmor-2.13/profiles/apparmor.d/sbin.syslogd 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor.d/sbin.syslogd 2018-08-04 21:52:13.362128584 +0530
@@ -11,7 +11,7 @@
#include <tunables/global>
-profile syslogd /{usr/,}sbin/syslogd {
+profile syslogd /{usr/,}sbin/syslogd flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/consoles>
diff -Naur apparmor-2.13/profiles/apparmor.d/sbin.syslog-ng apparmor-2.13-mod/profiles/apparmor.d/sbin.syslog-ng
--- apparmor-2.13/profiles/apparmor.d/sbin.syslog-ng 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor.d/sbin.syslog-ng 2018-08-04 21:52:13.378128584 +0530
@@ -15,7 +15,7 @@
#define this to be where syslog-ng is chrooted
@{CHROOT_BASE}=""
-profile syslog-ng /{usr/,}sbin/syslog-ng {
+profile syslog-ng /{usr/,}sbin/syslog-ng flags=(complain) {
#include <abstractions/base>
#include <abstractions/consoles>
#include <abstractions/nameservice>
diff -Naur apparmor-2.13/profiles/apparmor.d/usr.lib.apache2.mpm-prefork.apache2 apparmor-2.13-mod/profiles/apparmor.d/usr.lib.apache2.mpm-prefork.apache2
--- apparmor-2.13/profiles/apparmor.d/usr.lib.apache2.mpm-prefork.apache2 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor.d/usr.lib.apache2.mpm-prefork.apache2 2018-08-04 21:52:13.362128584 +0530
@@ -1,7 +1,7 @@
# Author: Marc Deslauriers <marc.deslauriers@ubuntu.com>
#include <tunables/global>
-/usr/lib/apache2/mpm-prefork/apache2 {
+/usr/lib/apache2/mpm-prefork/apache2 flags=(complain) {
# This profile is completely permissive.
# It is designed to target specific applications using mod_apparmor,
@@ -53,7 +53,7 @@
/** mrwlkix,
- ^DEFAULT_URI {
+ ^DEFAULT_URI flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
@@ -62,7 +62,7 @@
}
- ^HANDLING_UNTRUSTED_INPUT {
+ ^HANDLING_UNTRUSTED_INPUT flags=(complain) {
#include <abstractions/nameservice>
/ rw,
diff -Naur apparmor-2.13/profiles/apparmor.d/usr.lib.dovecot.anvil apparmor-2.13-mod/profiles/apparmor.d/usr.lib.dovecot.anvil
--- apparmor-2.13/profiles/apparmor.d/usr.lib.dovecot.anvil 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor.d/usr.lib.dovecot.anvil 2018-08-04 21:52:13.378128584 +0530
@@ -11,7 +11,7 @@
#include <tunables/global>
-/usr/lib/dovecot/anvil {
+/usr/lib/dovecot/anvil flags=(complain) {
#include <abstractions/base>
#include <abstractions/dovecot-common>
diff -Naur apparmor-2.13/profiles/apparmor.d/usr.lib.dovecot.auth apparmor-2.13-mod/profiles/apparmor.d/usr.lib.dovecot.auth
--- apparmor-2.13/profiles/apparmor.d/usr.lib.dovecot.auth 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor.d/usr.lib.dovecot.auth 2018-08-04 21:52:13.362128584 +0530
@@ -12,7 +12,7 @@
#include <tunables/global>
-/usr/lib/dovecot/auth {
+/usr/lib/dovecot/auth flags=(complain) {
#include <abstractions/authentication>
#include <abstractions/base>
#include <abstractions/mysql>
diff -Naur apparmor-2.13/profiles/apparmor.d/usr.lib.dovecot.config apparmor-2.13-mod/profiles/apparmor.d/usr.lib.dovecot.config
--- apparmor-2.13/profiles/apparmor.d/usr.lib.dovecot.config 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor.d/usr.lib.dovecot.config 2018-08-04 21:52:13.358128585 +0530
@@ -11,7 +11,7 @@
#include <tunables/global>
-/usr/lib/dovecot/config {
+/usr/lib/dovecot/config flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/dovecot-common>
diff -Naur apparmor-2.13/profiles/apparmor.d/usr.lib.dovecot.deliver apparmor-2.13-mod/profiles/apparmor.d/usr.lib.dovecot.deliver
--- apparmor-2.13/profiles/apparmor.d/usr.lib.dovecot.deliver 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor.d/usr.lib.dovecot.deliver 2018-08-04 21:52:13.362128584 +0530
@@ -14,7 +14,7 @@
#include <tunables/global>
#include <tunables/dovecot>
-/usr/lib/dovecot/deliver {
+/usr/lib/dovecot/deliver flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/dovecot-common>
diff -Naur apparmor-2.13/profiles/apparmor.d/usr.lib.dovecot.dict apparmor-2.13-mod/profiles/apparmor.d/usr.lib.dovecot.dict
--- apparmor-2.13/profiles/apparmor.d/usr.lib.dovecot.dict 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor.d/usr.lib.dovecot.dict 2018-08-04 21:52:13.362128584 +0530
@@ -11,7 +11,7 @@
#include <tunables/global>
-/usr/lib/dovecot/dict {
+/usr/lib/dovecot/dict flags=(complain) {
#include <abstractions/base>
#include <abstractions/mysql>
#include <abstractions/nameservice>
diff -Naur apparmor-2.13/profiles/apparmor.d/usr.lib.dovecot.dovecot-auth apparmor-2.13-mod/profiles/apparmor.d/usr.lib.dovecot.dovecot-auth
--- apparmor-2.13/profiles/apparmor.d/usr.lib.dovecot.dovecot-auth 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor.d/usr.lib.dovecot.dovecot-auth 2018-08-04 21:52:13.378128584 +0530
@@ -12,7 +12,7 @@
#include <tunables/global>
-/usr/lib/dovecot/dovecot-auth {
+/usr/lib/dovecot/dovecot-auth flags=(complain) {
#include <abstractions/authentication>
#include <abstractions/base>
#include <abstractions/nameservice>
diff -Naur apparmor-2.13/profiles/apparmor.d/usr.lib.dovecot.dovecot-lda apparmor-2.13-mod/profiles/apparmor.d/usr.lib.dovecot.dovecot-lda
--- apparmor-2.13/profiles/apparmor.d/usr.lib.dovecot.dovecot-lda 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor.d/usr.lib.dovecot.dovecot-lda 2018-08-04 21:55:57.894117337 +0530
@@ -12,7 +12,7 @@
#include <tunables/global>
#include <tunables/dovecot>
-/usr/lib/dovecot/dovecot-lda flags=(attach_disconnected) {
+/usr/lib/dovecot/dovecot-lda flags=(attach_disconnected,complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/dovecot-common>
@@ -37,7 +37,7 @@
#include <local/usr.lib.dovecot.dovecot-lda>
- profile /usr/sbin/sendmail flags=(attach_disconnected) {
+ profile /usr/sbin/sendmail flags=(attach_disconnected,complain) {
# this profile is based on the usr.sbin.sendmail profile in extras
# and should support both postfix' and sendmail's sendmail binary
diff -Naur apparmor-2.13/profiles/apparmor.d/usr.lib.dovecot.imap apparmor-2.13-mod/profiles/apparmor.d/usr.lib.dovecot.imap
--- apparmor-2.13/profiles/apparmor.d/usr.lib.dovecot.imap 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor.d/usr.lib.dovecot.imap 2018-08-04 21:52:13.362128584 +0530
@@ -13,7 +13,7 @@
#include <tunables/global>
#include <tunables/dovecot>
-/usr/lib/dovecot/imap {
+/usr/lib/dovecot/imap flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/dovecot-common>
diff -Naur apparmor-2.13/profiles/apparmor.d/usr.lib.dovecot.imap-login apparmor-2.13-mod/profiles/apparmor.d/usr.lib.dovecot.imap-login
--- apparmor-2.13/profiles/apparmor.d/usr.lib.dovecot.imap-login 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor.d/usr.lib.dovecot.imap-login 2018-08-04 21:52:13.362128584 +0530
@@ -11,7 +11,7 @@
# vim: ft=apparmor
#include <tunables/global>
-/usr/lib/dovecot/imap-login {
+/usr/lib/dovecot/imap-login flags=(complain) {
#include <abstractions/base>
#include <abstractions/ssl_certs>
#include <abstractions/ssl_keys>
diff -Naur apparmor-2.13/profiles/apparmor.d/usr.lib.dovecot.lmtp apparmor-2.13-mod/profiles/apparmor.d/usr.lib.dovecot.lmtp
--- apparmor-2.13/profiles/apparmor.d/usr.lib.dovecot.lmtp 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor.d/usr.lib.dovecot.lmtp 2018-08-04 21:52:13.358128585 +0530
@@ -12,7 +12,7 @@
#include <tunables/global>
#include <tunables/dovecot>
-/usr/lib/dovecot/lmtp {
+/usr/lib/dovecot/lmtp flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/dovecot-common>
diff -Naur apparmor-2.13/profiles/apparmor.d/usr.lib.dovecot.log apparmor-2.13-mod/profiles/apparmor.d/usr.lib.dovecot.log
--- apparmor-2.13/profiles/apparmor.d/usr.lib.dovecot.log 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor.d/usr.lib.dovecot.log 2018-08-04 21:55:47.938117836 +0530
@@ -11,7 +11,7 @@
#include <tunables/global>
-/usr/lib/dovecot/log flags=(attach_disconnected) {
+/usr/lib/dovecot/log flags=(attach_disconnected,complain) {
#include <abstractions/base>
#include <abstractions/dovecot-common>
diff -Naur apparmor-2.13/profiles/apparmor.d/usr.lib.dovecot.managesieve apparmor-2.13-mod/profiles/apparmor.d/usr.lib.dovecot.managesieve
--- apparmor-2.13/profiles/apparmor.d/usr.lib.dovecot.managesieve 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor.d/usr.lib.dovecot.managesieve 2018-08-04 21:52:13.362128584 +0530
@@ -13,7 +13,7 @@
#include <tunables/global>
#include <tunables/dovecot>
-/usr/lib/dovecot/managesieve {
+/usr/lib/dovecot/managesieve flags=(complain) {
#include <abstractions/base>
#include <abstractions/dovecot-common>
diff -Naur apparmor-2.13/profiles/apparmor.d/usr.lib.dovecot.managesieve-login apparmor-2.13-mod/profiles/apparmor.d/usr.lib.dovecot.managesieve-login
--- apparmor-2.13/profiles/apparmor.d/usr.lib.dovecot.managesieve-login 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor.d/usr.lib.dovecot.managesieve-login 2018-08-04 21:52:13.362128584 +0530
@@ -14,7 +14,7 @@
#include <tunables/global>
-/usr/lib/dovecot/managesieve-login {
+/usr/lib/dovecot/managesieve-login flags=(complain) {
#include <abstractions/base>
#include <abstractions/ssl_certs>
#include <abstractions/ssl_keys>
diff -Naur apparmor-2.13/profiles/apparmor.d/usr.lib.dovecot.pop3 apparmor-2.13-mod/profiles/apparmor.d/usr.lib.dovecot.pop3
--- apparmor-2.13/profiles/apparmor.d/usr.lib.dovecot.pop3 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor.d/usr.lib.dovecot.pop3 2018-08-04 21:52:13.378128584 +0530
@@ -13,7 +13,7 @@
#include <tunables/global>
#include <tunables/dovecot>
-/usr/lib/dovecot/pop3 {
+/usr/lib/dovecot/pop3 flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/dovecot-common>
diff -Naur apparmor-2.13/profiles/apparmor.d/usr.lib.dovecot.pop3-login apparmor-2.13-mod/profiles/apparmor.d/usr.lib.dovecot.pop3-login
--- apparmor-2.13/profiles/apparmor.d/usr.lib.dovecot.pop3-login 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor.d/usr.lib.dovecot.pop3-login 2018-08-04 21:52:13.358128585 +0530
@@ -12,7 +12,7 @@
#include <tunables/global>
-/usr/lib/dovecot/pop3-login {
+/usr/lib/dovecot/pop3-login flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/ssl_certs>
diff -Naur apparmor-2.13/profiles/apparmor.d/usr.lib.dovecot.ssl-params apparmor-2.13-mod/profiles/apparmor.d/usr.lib.dovecot.ssl-params
--- apparmor-2.13/profiles/apparmor.d/usr.lib.dovecot.ssl-params 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor.d/usr.lib.dovecot.ssl-params 2018-08-04 21:52:13.378128584 +0530
@@ -11,7 +11,7 @@
#include <tunables/global>
-/usr/lib/dovecot/ssl-params {
+/usr/lib/dovecot/ssl-params flags=(complain) {
#include <abstractions/base>
#include <abstractions/dovecot-common>
diff -Naur apparmor-2.13/profiles/apparmor.d/usr.lib.dovecot.stats apparmor-2.13-mod/profiles/apparmor.d/usr.lib.dovecot.stats
--- apparmor-2.13/profiles/apparmor.d/usr.lib.dovecot.stats 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor.d/usr.lib.dovecot.stats 2018-08-04 21:52:13.362128584 +0530
@@ -11,7 +11,7 @@
#include <tunables/global>
-/usr/lib/dovecot/stats {
+/usr/lib/dovecot/stats flags=(complain) {
#include <abstractions/base>
#include <abstractions/dovecot-common>
diff -Naur apparmor-2.13/profiles/apparmor.d/usr.sbin.apache2 apparmor-2.13-mod/profiles/apparmor.d/usr.sbin.apache2
--- apparmor-2.13/profiles/apparmor.d/usr.sbin.apache2 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor.d/usr.sbin.apache2 2018-08-04 21:59:21.910107117 +0530
@@ -1,7 +1,7 @@
# Author: Marc Deslauriers <marc.deslauriers@ubuntu.com>
#include <tunables/global>
-/usr/sbin/apache2 flags=(attach_disconnected) {
+/usr/sbin/apache2 flags=(attach_disconnected,complain) {
# This profile is completely permissive.
# It is designed to target specific applications using mod_apparmor,
@@ -84,7 +84,7 @@
/** mrwlkix,
- ^DEFAULT_URI flags=(attach_disconnected) {
+ ^DEFAULT_URI flags=(attach_disconnected,complain) {
#include <abstractions/base>
#include <abstractions/apache2-common>
@@ -92,7 +92,7 @@
/** mrwlkix,
}
- ^HANDLING_UNTRUSTED_INPUT flags=(attach_disconnected) {
+ ^HANDLING_UNTRUSTED_INPUT flags=(attach_disconnected,complain) {
#include <abstractions/apache2-common>
/ rw,
diff -Naur apparmor-2.13/profiles/apparmor.d/usr.sbin.avahi-daemon apparmor-2.13-mod/profiles/apparmor.d/usr.sbin.avahi-daemon
--- apparmor-2.13/profiles/apparmor.d/usr.sbin.avahi-daemon 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor.d/usr.sbin.avahi-daemon 2018-08-04 21:52:13.378128584 +0530
@@ -1,5 +1,5 @@
#include <tunables/global>
-/usr/sbin/avahi-daemon {
+/usr/sbin/avahi-daemon flags=(complain) {
#include <abstractions/base>
#include <abstractions/consoles>
#include <abstractions/dbus>
diff -Naur apparmor-2.13/profiles/apparmor.d/usr.sbin.dnsmasq apparmor-2.13-mod/profiles/apparmor.d/usr.sbin.dnsmasq
--- apparmor-2.13/profiles/apparmor.d/usr.sbin.dnsmasq 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor.d/usr.sbin.dnsmasq 2018-08-04 21:55:26.974118886 +0530
@@ -12,7 +12,7 @@
@{TFTP_DIR}=/var/tftp /srv/tftpboot
#include <tunables/global>
-/usr/sbin/dnsmasq flags=(attach_disconnected) {
+/usr/sbin/dnsmasq flags=(attach_disconnected,complain) {
#include <abstractions/base>
#include <abstractions/dbus>
#include <abstractions/nameservice>
@@ -88,7 +88,7 @@
/{,var/}run/NetworkManager/dnsmasq.conf r,
/{,var/}run/NetworkManager/dnsmasq.pid w,
- profile libvirt_leaseshelper {
+ profile libvirt_leaseshelper flags=(complain) {
#include <abstractions/base>
/etc/libnl-3/classid r,
diff -Naur apparmor-2.13/profiles/apparmor.d/usr.sbin.dovecot apparmor-2.13-mod/profiles/apparmor.d/usr.sbin.dovecot
--- apparmor-2.13/profiles/apparmor.d/usr.sbin.dovecot 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor.d/usr.sbin.dovecot 2018-08-04 21:56:30.926115682 +0530
@@ -12,7 +12,7 @@
#include <tunables/global>
-/usr/sbin/dovecot flags=(attach_disconnected) {
+/usr/sbin/dovecot flags=(attach_disconnected,complain) {
#include <abstractions/authentication>
#include <abstractions/base>
#include <abstractions/dovecot-common>
diff -Naur apparmor-2.13/profiles/apparmor.d/usr.sbin.identd apparmor-2.13-mod/profiles/apparmor.d/usr.sbin.identd
--- apparmor-2.13/profiles/apparmor.d/usr.sbin.identd 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor.d/usr.sbin.identd 2018-08-04 21:52:13.362128584 +0530
@@ -11,7 +11,7 @@
#include <tunables/global>
-/usr/sbin/identd {
+/usr/sbin/identd flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
capability net_bind_service,
diff -Naur apparmor-2.13/profiles/apparmor.d/usr.sbin.mdnsd apparmor-2.13-mod/profiles/apparmor.d/usr.sbin.mdnsd
--- apparmor-2.13/profiles/apparmor.d/usr.sbin.mdnsd 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor.d/usr.sbin.mdnsd 2018-08-04 21:52:13.358128585 +0530
@@ -11,7 +11,7 @@
#include <tunables/global>
-/usr/sbin/mdnsd {
+/usr/sbin/mdnsd flags=(complain) {
#include <abstractions/base>
#include <abstractions/consoles>
#include <abstractions/nameservice>
diff -Naur apparmor-2.13/profiles/apparmor.d/usr.sbin.nmbd apparmor-2.13-mod/profiles/apparmor.d/usr.sbin.nmbd
--- apparmor-2.13/profiles/apparmor.d/usr.sbin.nmbd 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor.d/usr.sbin.nmbd 2018-08-04 21:52:13.358128585 +0530
@@ -1,6 +1,6 @@
#include <tunables/global>
-/usr/sbin/nmbd {
+/usr/sbin/nmbd flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/samba>
diff -Naur apparmor-2.13/profiles/apparmor.d/usr.sbin.nscd apparmor-2.13-mod/profiles/apparmor.d/usr.sbin.nscd
--- apparmor-2.13/profiles/apparmor.d/usr.sbin.nscd 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor.d/usr.sbin.nscd 2018-08-04 21:52:13.378128584 +0530
@@ -10,7 +10,7 @@
# ------------------------------------------------------------------
#include <tunables/global>
-/usr/sbin/nscd {
+/usr/sbin/nscd flags=(complain) {
#include <abstractions/base>
#include <abstractions/consoles>
#include <abstractions/nameservice>
diff -Naur apparmor-2.13/profiles/apparmor.d/usr.sbin.ntpd apparmor-2.13-mod/profiles/apparmor.d/usr.sbin.ntpd
--- apparmor-2.13/profiles/apparmor.d/usr.sbin.ntpd 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor.d/usr.sbin.ntpd 2018-08-04 21:55:10.414119715 +0530
@@ -11,7 +11,7 @@
#include <tunables/global>
#include <tunables/ntpd>
-/usr/sbin/ntpd flags=(attach_disconnected) {
+/usr/sbin/ntpd flags=(attach_disconnected,complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/openssl>
diff -Naur apparmor-2.13/profiles/apparmor.d/usr.sbin.smbd apparmor-2.13-mod/profiles/apparmor.d/usr.sbin.smbd
--- apparmor-2.13/profiles/apparmor.d/usr.sbin.smbd 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor.d/usr.sbin.smbd 2018-08-04 21:52:13.358128585 +0530
@@ -1,6 +1,6 @@
#include <tunables/global>
-/usr/sbin/smbd {
+/usr/sbin/smbd flags=(complain) {
#include <abstractions/authentication>
#include <abstractions/base>
#include <abstractions/consoles>
diff -Naur apparmor-2.13/profiles/apparmor.d/usr.sbin.smbldap-useradd apparmor-2.13-mod/profiles/apparmor.d/usr.sbin.smbldap-useradd
--- apparmor-2.13/profiles/apparmor.d/usr.sbin.smbldap-useradd 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor.d/usr.sbin.smbldap-useradd 2018-08-04 21:52:13.362128584 +0530
@@ -1,7 +1,7 @@
# Last Modified: Tue Jan 3 00:17:40 2012
#include <tunables/global>
-/usr/sbin/smbldap-useradd {
+/usr/sbin/smbldap-useradd flags=(complain) {
#include <abstractions/base>
#include <abstractions/bash>
#include <abstractions/nameservice>
@@ -20,7 +20,7 @@
# Site-specific additions and overrides. See local/README for details.
#include <local/usr.sbin.smbldap-useradd>
- profile /etc/init.d/nscd {
+ profile /etc/init.d/nscd flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
diff -Naur apparmor-2.13/profiles/apparmor.d/usr.sbin.traceroute apparmor-2.13-mod/profiles/apparmor.d/usr.sbin.traceroute
--- apparmor-2.13/profiles/apparmor.d/usr.sbin.traceroute 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor.d/usr.sbin.traceroute 2018-08-04 21:52:13.378128584 +0530
@@ -10,7 +10,7 @@
# ------------------------------------------------------------------
#include <tunables/global>
-/usr/{sbin/traceroute,bin/traceroute.db} {
+/usr/{sbin/traceroute,bin/traceroute.db} flags=(complain) {
#include <abstractions/base>
#include <abstractions/consoles>
#include <abstractions/nameservice>
diff -Naur apparmor-2.13/profiles/apparmor.d/usr.sbin.winbindd apparmor-2.13-mod/profiles/apparmor.d/usr.sbin.winbindd
--- apparmor-2.13/profiles/apparmor.d/usr.sbin.winbindd 2018-04-15 19:18:53.000000000 +0530
+++ apparmor-2.13-mod/profiles/apparmor.d/usr.sbin.winbindd 2018-08-04 21:52:13.378128584 +0530
@@ -1,6 +1,6 @@
#include <tunables/global>
-/usr/sbin/winbindd {
+/usr/sbin/winbindd flags=(complain) {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/samba>