[apparmor] [patch] winbindd profile: allow k for /etc/samba/smbd.tmp/msg/*
Steve Beattie
steve at nxnw.org
Thu Jul 30 19:24:40 UTC 2015
On Thu, Jul 30, 2015 at 09:04:23PM +0200, Christian Boltz wrote:
> $subject ;-)
>
> References: https://bugzilla.opensuse.org/show_bug.cgi?id=921098 starting at comment 15
>
> I propose this patch for trunk and 2.9.
Acked-by: Steve Beattie <steve at nxnw.org> for trunk and 2.9.
> [ profiles-winbindd-lock.diff ]
>
> === modified file 'profiles/apparmor.d/usr.sbin.winbindd'
> --- profiles/apparmor.d/usr.sbin.winbindd 2015-05-18 23:25:26 +0000
> +++ profiles/apparmor.d/usr.sbin.winbindd 2015-07-30 18:57:57 +0000
> @@ -15,7 +15,7 @@
> /etc/samba/secrets.tdb rwk,
> /etc/samba/smbd.tmp/ rw,
> /etc/samba/smbd.tmp/msg/ rw,
> - /etc/samba/smbd.tmp/msg/* rw,
> + /etc/samba/smbd.tmp/msg/* rwk,
> @{PROC}/sys/kernel/core_pattern r,
> /tmp/.winbindd/ w,
> /tmp/krb5cc_* rwk,
>
--
Steve Beattie
<sbeattie at ubuntu.com>
http://NxNW.org/~steve/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20150730/bc1b231d/attachment.pgp>
More information about the AppArmor
mailing list