[apparmor] [patch] smbd - various /usr/lib*/samba rules

[Steve Beattie]

On Thu, Jan 05, 2012 at 09:42:32PM +0100, Christian Boltz wrote:
> Am Donnerstag, 5. Januar 2012 schrieb Christian Boltz:
> > Hello,
> > 
> > according to Lars Müller (a samba developer) smbd needs access to some
> > more files in /usr/lib*/samba/ in some cases.
> > 
> > References: https://bugzilla.novell.com/show_bug.cgi?id=725967#c5
> 
> The *.dat should be r, not mr.
> Updated patch:
> 
> === modified file 'profiles/apparmor.d/usr.sbin.smbd'
> --- profiles/apparmor.d/usr.sbin.smbd   2011-12-29 16:34:01 +0000
> +++ profiles/apparmor.d/usr.sbin.smbd   2012-01-05 20:41:54 +0000
> @@ -26,6 +26,9 @@
>    /proc/*/mounts r,
>    /proc/sys/kernel/core_pattern r,
>    /usr/lib*/samba/vfs/*.so mr,
> +  /usr/lib*/samba/charset/*.so mr,
> +  /usr/lib*/samba/auth/script.so mr,
> +  /usr/lib*/samba/{lowercase,upcase,valid}.dat r,
>    /usr/sbin/smbd mr,
>    /etc/samba/* rwk,
>    /var/cache/samba/** rwk,

Acked-By: Steve Beattie <sbeattie at ubuntu.com> for both trunk and 2.7
branch.


-- 
Steve Beattie
<sbeattie at ubuntu.com>
http://NxNW.org/~steve/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20120105/9d997752/attachment.pgp>