serverok.pl is a Fediverse instance that uses the ActivityPub protocol. In other words, users at this host can communicate with people that use software like Mastodon, Pleroma, Friendica, etc. all around the world.
This server runs the snac software and there is no automatic sign-up process.
I am trying to get sslh to work with #apparmor
Everything’s fine so far BUT it silently stops working after a few hours.
Dug into it, it fails to open /etc/hosts.deny.
Dug a tiny bit deeper, it fails right after /etc/hosts.deny is replaced by an updated version.
(Test: `cp /etc/hosts.deny xxx; chmod 0644 xxx; mv xxx /etc/hosts.deny`).
Profile contains `@{etc_ro}/hosts.deny r,`
strace shows sslh’s `openat` fails (EACCES).
apparmor is in complain mode but does not!