Re:Application Container Security Guide [pdf]
by brazzledazzle on Monday November 20, 2017 @07:56PM
(#15744709)
This can also cause a bunch of fun errors (on installation no less) when you have custom PAM plugins. At least last time I had to deal with that (might have been as long ago as 12.04).
Denials by AppArmor (or any other ACL addition) really should have a more verbose diagnostic message AND a dedicated ERRNO that is different from the standard ones.