[apparmor] [patch] winbindd profile: allow k for /etc/samba/smbd.tmp/msg/*

Steve Beattie steve at nxnw.org
Thu Jul 30 19:24:40 UTC 2015


On Thu, Jul 30, 2015 at 09:04:23PM +0200, Christian Boltz wrote:
> $subject ;-)
> 
> References: https://bugzilla.opensuse.org/show_bug.cgi?id=921098 starting at comment 15
> 
> I propose this patch for trunk and 2.9.

Acked-by: Steve Beattie <steve at nxnw.org> for trunk and 2.9.

> [ profiles-winbindd-lock.diff ]
> 
> === modified file 'profiles/apparmor.d/usr.sbin.winbindd'
> --- profiles/apparmor.d/usr.sbin.winbindd       2015-05-18 23:25:26 +0000
> +++ profiles/apparmor.d/usr.sbin.winbindd       2015-07-30 18:57:57 +0000
> @@ -15,7 +15,7 @@
>    /etc/samba/secrets.tdb rwk,
>    /etc/samba/smbd.tmp/ rw,
>    /etc/samba/smbd.tmp/msg/ rw,
> -  /etc/samba/smbd.tmp/msg/* rw,
> +  /etc/samba/smbd.tmp/msg/* rwk,
>    @{PROC}/sys/kernel/core_pattern r,
>    /tmp/.winbindd/ w,
>    /tmp/krb5cc_* rwk,
> 

-- 
Steve Beattie
<sbeattie at ubuntu.com>
http://NxNW.org/~steve/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20150730/bc1b231d/attachment.pgp>


More information about the AppArmor mailing list