[apparmor] [Patch] cleanup usr.sbin.smbd profile

Kshitij Gupta kgupta8592 at gmail.com
Wed Oct 9 17:24:03 UTC 2013


Hello,

This patch removes:-
2 rules covered by abstractions in smbd profile:
- /var/log/samba/cores/smbd/ rw and /var/log/samba/cores/smbd/** rw
are in abstractions/samba covered by /var/log/samba/cores/** rw

1 superfluous rule:
- /var/lib/samba/printers/** rw is covered by /var/lib/samba/** rwk


=== modified file 'profiles/apparmor.d/usr.sbin.smbd'
--- profiles/apparmor.d/usr.sbin.smbd 2013-09-19 05:35:00.288368000 +0530
+++ profiles/apparmor.d/usr.sbin.smbd 2013-10-09 22:33:42.860696188 +0530
@@ -35,13 +35,10 @@
   /var/cache/samba/** rwk,
   /var/cache/samba/printing/printers.tdb mrw,
   /var/lib/samba/** rwk,
-  /var/lib/samba/printers/** rw,
   /{,var/}run/cups/cups.sock rw,
   /{,var/}run/dbus/system_bus_socket rw,
   /{,var/}run/samba/** rk,
   /{,var/}run/samba/smbd.pid rw,
-  /var/log/samba/cores/smbd/ rw,
-  /var/log/samba/cores/smbd/** rw,
   /var/spool/samba/** rw,

   @{HOMEDIRS}/** lrwk,


Regards,

Kshitij Gupta



More information about the AppArmor mailing list