[apparmor] [Patch] cleanup usr.sbin.smbd profile

Steve Beattie steve at nxnw.org
Wed Oct 9 20:44:03 UTC 2013


On Wed, Oct 09, 2013 at 10:54:03PM +0530, Kshitij Gupta wrote:
> Hello,
> 
> This patch removes:-
> 2 rules covered by abstractions in smbd profile:
> - /var/log/samba/cores/smbd/ rw and /var/log/samba/cores/smbd/** rw
> are in abstractions/samba covered by /var/log/samba/cores/** rw
> 
> 1 superfluous rule:
> - /var/lib/samba/printers/** rw is covered by /var/lib/samba/** rwk

Acked-by: Steve Beattie <steve at nxnw.org> (and committed). Thanks!

> === modified file 'profiles/apparmor.d/usr.sbin.smbd'
> --- profiles/apparmor.d/usr.sbin.smbd 2013-09-19 05:35:00.288368000 +0530
> +++ profiles/apparmor.d/usr.sbin.smbd 2013-10-09 22:33:42.860696188 +0530
> @@ -35,13 +35,10 @@
>    /var/cache/samba/** rwk,
>    /var/cache/samba/printing/printers.tdb mrw,
>    /var/lib/samba/** rwk,
> -  /var/lib/samba/printers/** rw,
>    /{,var/}run/cups/cups.sock rw,
>    /{,var/}run/dbus/system_bus_socket rw,
>    /{,var/}run/samba/** rk,
>    /{,var/}run/samba/smbd.pid rw,
> -  /var/log/samba/cores/smbd/ rw,
> -  /var/log/samba/cores/smbd/** rw,
>    /var/spool/samba/** rw,
> 
>    @{HOMEDIRS}/** lrwk,
> 

-- 
Steve Beattie
<sbeattie at ubuntu.com>
http://NxNW.org/~steve/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20131009/c673dbc4/attachment.pgp>


More information about the AppArmor mailing list