[apparmor] [patch] winbindd profile update

Steve Beattie steve at nxnw.org
Mon Apr 21 18:33:02 UTC 2014


On Fri, Apr 18, 2014 at 04:17:41PM +0200, Christian Boltz wrote:
> Hello,
> 
> this patch updates the usr.sbin.winbindd profile
> - allow rw access to /var/cache/krb5rcache/ 
>  - treat passdb.tdb.tmp as passdb.tdb
> 
> Patch from Lars Müller <lmuelle at suse.com>
> 
> References: https://bugzilla.novell.com/show_bug.cgi?id=870607

Acked-by: Steve Beattie <steve at nxnw.org>
Though one wonders if

> +  /var/cache/krb5rcache/* rw,

should be in a 'krb5-services' abstraction or somesuch, for other
kerberized services?

-- 
Steve Beattie
<sbeattie at ubuntu.com>
http://NxNW.org/~steve/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20140421/d9035018/attachment.pgp>


More information about the AppArmor mailing list