[apparmor] [patch] allow samba to create /var/run/samba/

Christian Boltz apparmor at cboltz.de
Mon Dec 23 12:42:33 UTC 2013


Hello,

Am Sonntag, 22. Dezember 2013 schrieb Christian Boltz:
> samba (nmbd and smbd) need to create /var/run/samba at startup
> (at least on systems where /var/run is on a tmpfs)

It also needs to create /var/cache/samba/

> References: https://bugzilla.novell.com/show_bug.cgi?id=856651
> 
> I propose this patch for trunk and 2.8

Updated patch:

=== modified file 'profiles/apparmor.d/abstractions/samba'
--- profiles/apparmor.d/abstractions/samba      2013-11-20 00:11:01 
+++ profiles/apparmor.d/abstractions/samba      2013-12-23 12:28:06 
@@ -12,9 +12,11 @@
   /etc/samba/* r,
   /usr/share/samba/*.dat r,
   /usr/share/samba/codepages/{lowcase,upcase,valid}.dat r,
+  /var/cache/samba/ w,
   /var/lib/samba/**.tdb rwk,
   /var/log/samba/cores/ rw,
   /var/log/samba/cores/** rw,
   /var/log/samba/log.* w,
+  /{,var/}run/samba/ w,
   /{,var/}run/samba/*.tdb rw,
 

Regards,

Christian Boltz
-- 
> > Wieso ich, ich habe 1,5 Mbit anbindung, ständig.
> Du? Oder dein Rechner? :-)
Was meinst du wie ich nach 1,500,000 Bit aussehe, glaubst du,
dann könnte ich noch schreiben, geschweige denn programmieren?
[> Ratti und Gerald Goebel in fontlinge-devel]




More information about the AppArmor mailing list