+1 to add 'capability chown' to the profile, and also for '/var/lib/sss/mc/initgroups r,' (since it may or may not make it into apparmor SRU in a timely manner.
+1 to add 'capability chown' to the profile, and also for '/var/lib/ sss/mc/ initgroups r,' (since it may or may not make it into apparmor SRU in a timely manner.