[Bug 2148695] [NEW] default apparmor profile breaks mod_sftp

[Andrei Caraman]

Public bug reported:


proftpd 1.3.9~dfsg-4 on Ubuntu resolute


In resolute, apparmor ships a default enforcing profile for proftpd,
which seems to be just fine for old style FTP operations.

Unfortunately, it does not work as-is when mod_sftp is to be used, as
some of its actions (such as reading ssh host keys) are not covered in
the default profile.

A possible workaround until the apparmor profile can be adjusted might
be to switch it to complain mode.

** Affects: proftpd-dfsg (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of ProFTPD
Maintainance Team, which is subscribed to proftpd-dfsg in Ubuntu.
https://bugs.launchpad.net/bugs/2148695

Title:
  default apparmor profile breaks mod_sftp

Status in proftpd-dfsg package in Ubuntu:
  New

Bug description:
  
  proftpd 1.3.9~dfsg-4 on Ubuntu resolute


  In resolute, apparmor ships a default enforcing profile for proftpd,
  which seems to be just fine for old style FTP operations.

  Unfortunately, it does not work as-is when mod_sftp is to be used, as
  some of its actions (such as reading ssh host keys) are not covered in
  the default profile.

  A possible workaround until the apparmor profile can be adjusted might
  be to switch it to complain mode.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/proftpd-dfsg/+bug/2148695/+subscriptions