[apparmor] [patch] smbd - various /usr/lib*/samba rules

Christian Boltz apparmor at cboltz.de
Thu Jan 5 20:21:46 UTC 2012


Hello,

according to Lars Müller (a samba developer) smbd needs access to some 
more files in /usr/lib*/samba/ in some cases.

References: https://bugzilla.novell.com/show_bug.cgi?id=725967#c5

=== modified file 'profiles/apparmor.d/usr.sbin.smbd'
--- profiles/apparmor.d/usr.sbin.smbd   2011-12-29 16:34:01 +0000
+++ profiles/apparmor.d/usr.sbin.smbd   2012-01-05 20:16:02 +0000
@@ -26,6 +26,9 @@
   /proc/*/mounts r,
   /proc/sys/kernel/core_pattern r,
   /usr/lib*/samba/vfs/*.so mr,
+  /usr/lib*/samba/charset/*.so mr,
+  /usr/lib*/samba/auth/script.so mr,
+  /usr/lib*/samba/{lowercase,upcase,valid}.dat mr,
   /usr/sbin/smbd mr,
   /etc/samba/* rwk,
   /var/cache/samba/** rwk,


Regards,

Christian Boltz
-- 
Direkter Mailkontakt mit dem Paketmacher. Tränen, Gewaltandrohnung,
knappe Unterwäsche - als nix genützt. Abgelehnt.
[Ratti ueber einen Aenderungswunsch an einem SuSE-Paket]




More information about the AppArmor mailing list