[apparmor] [patch] Allow mr for /usr/lib*/ldb/*.so in samba abstractions

Christian Boltz apparmor at cboltz.de
Fri Jul 22 14:24:26 UTC 2016


Hallo,

$subject.

This is needed for winbindd, but smbd could also need it.

References: https://bugzilla.opensuse.org/show_bug.cgi?id=990006


[ samba-libs.diff ]

=== modified file 'profiles/apparmor.d/abstractions/samba'
--- profiles/apparmor.d/abstractions/samba      2015-05-18 23:25:26 +0000
+++ profiles/apparmor.d/abstractions/samba      2016-07-22 14:21:08 +0000
@@ -10,6 +10,7 @@
 # ------------------------------------------------------------------
 
   /etc/samba/* r,
+  /usr/lib*/ldb/*.so mr,
   /usr/share/samba/*.dat r,
   /usr/share/samba/codepages/{lowcase,upcase,valid}.dat r,
   /var/cache/samba/ w,



Regards,

Christian Boltz
-- 
> Anyway, what does our mission statement say?
"Have a lot of fun..."
[> Per Jessen and Greg KH in opensuse-factory]
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: This is a digitally signed message part.
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20160722/8d59a4a6/attachment.pgp>


More information about the AppArmor mailing list