[apparmor] [patch] smbd - /etc/netgroup

Christian Boltz apparmor at cboltz.de
Thu Dec 29 16:38:12 UTC 2011


Hello,

Am Mittwoch, 28. Dezember 2011 schrieb John Johansen:
> On 12/21/2011 10:06 AM, Christian Boltz wrote:
> > smbd needs read access to /etc/netgroup.
> > 
> > References: https://bugzilla.novell.com/show_bug.cgi?id=738041

> > I propose the patch for trunk and the 2.7 branch.
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

> > === modified file 'profiles/apparmor.d/usr.sbin.smbd'
> > --- profiles/apparmor.d/usr.sbin.smbd   2011-11-01 17:28:49 +0000
> > +++ profiles/apparmor.d/usr.sbin.smbd   2011-12-21 17:52:32 +0000
> > @@ -21,6 +21,7 @@
> > 
> >     capability sys_tty_config,
> >     
> >     /etc/mtab r,
> > 
> > +  /etc/netgroup r,
> > 
> >     /etc/printcap r,
> >     /proc/*/mounts r,
> >     /proc/sys/kernel/core_pattern r,

> This looks reasonable to me
> 
> Acked-by: John Johansen <john.johansen at canonical.com>

Thanks, commited.

What about backporting[1] this the 2.7 branch? ;-)


Regards,

Christian Boltz

[1] I know that's a big word for a one-line addition ;-)
-- 
Meine allerste Festplatte hatte 30 MB, und ich war der King, weil alle
anderen 20 MB hatten. Sie fragten, was ich mit 30 MB wolle, die bekomme
ich doch nie voll. ;)  Meine jetzige Graphikkarte hat mehr. ;))
[Bernd Brodesser in suse-linux]




More information about the AppArmor mailing list