[apparmor] [patch] smbd - various /usr/lib*/samba rules
Christian Boltz
apparmor at cboltz.de
Thu Jan 5 20:21:46 UTC 2012
Hello,
according to Lars Müller (a samba developer) smbd needs access to some
more files in /usr/lib*/samba/ in some cases.
References: https://bugzilla.novell.com/show_bug.cgi?id=725967#c5
=== modified file 'profiles/apparmor.d/usr.sbin.smbd'
--- profiles/apparmor.d/usr.sbin.smbd 2011-12-29 16:34:01 +0000
+++ profiles/apparmor.d/usr.sbin.smbd 2012-01-05 20:16:02 +0000
@@ -26,6 +26,9 @@
/proc/*/mounts r,
/proc/sys/kernel/core_pattern r,
/usr/lib*/samba/vfs/*.so mr,
+ /usr/lib*/samba/charset/*.so mr,
+ /usr/lib*/samba/auth/script.so mr,
+ /usr/lib*/samba/{lowercase,upcase,valid}.dat mr,
/usr/sbin/smbd mr,
/etc/samba/* rwk,
/var/cache/samba/** rwk,
Regards,
Christian Boltz
--
Direkter Mailkontakt mit dem Paketmacher. Tränen, Gewaltandrohnung,
knappe Unterwäsche - als nix genützt. Abgelehnt.
[Ratti ueber einen Aenderungswunsch an einem SuSE-Paket]
More information about the AppArmor
mailing list