sorry, openssh tries to open krb5.conf with 'w::' mask for some reason, so in order to avoid these messages
type=APPARMOR_DENIED msg=audit(1233663334.360:7469): operation="inode_permission" requested_mask="w::" denied_mask="w::" fsuid=0 name="/etc/krb5.conf" pid=17575 profile="/usr/sbin/sshd"
it should have rw. 'r' is already set in abstractions/kerberosclient.
sorry, openssh tries to open krb5.conf with 'w::' mask for some reason, so in order to avoid these messages
type=APPARMOR_ DENIED msg=audit( 1233663334. 360:7469) : operation= "inode_ permission" requested_ mask="w: :" denied_mask="w::" fsuid=0 name="/ etc/krb5. conf" pid=17575 profile= "/usr/sbin/ sshd"
it should have rw. 'r' is already set in abstractions/ kerberosclient.