[apparmor] [patch] Allow mr for /usr/lib*/ldb/*.so in samba abstractions
Christian Boltz
apparmor at cboltz.de
Fri Jul 22 14:29:07 UTC 2016
Hello,
Am Freitag, 22. Juli 2016, 16:24:26 CEST schrieb Christian Boltz:
> $subject.
>
> This is needed for winbindd, but smbd could also need it.
>
> References: https://bugzilla.opensuse.org/show_bug.cgi?id=990006
I forgot my usual note for profile updates:
I propose this patch for trunk, 2.10 and 2.9.
> [ samba-libs.diff ]
>
> === modified file 'profiles/apparmor.d/abstractions/samba'
> --- profiles/apparmor.d/abstractions/samba 2015-05-18 23:25:26
> +0000 +++ profiles/apparmor.d/abstractions/samba 2016-07-22
> 14:21:08 +0000 @@ -10,6 +10,7 @@
> # ------------------------------------------------------------------
>
> /etc/samba/* r,
> + /usr/lib*/ldb/*.so mr,
> /usr/share/samba/*.dat r,
> /usr/share/samba/codepages/{lowcase,upcase,valid}.dat r,
> /var/cache/samba/ w,
Regards,
Christian Boltz
--
Aber das ist dann ungefähr so filigran wie mit 'nem Rambock die Haustür
aufzumachen, nur weil man den Schlüssel tief im Rucksack verbuddelt hat.
[Peer Heinlein in postfixbuch-users]
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: This is a digitally signed message part.
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20160722/600e313c/attachment.pgp>
More information about the AppArmor
mailing list