[apparmor] [patch] Allow mr for /usr/lib*/ldb/*.so in samba abstractions

Christian Boltz apparmor at cboltz.de
Fri Jul 22 14:29:07 UTC 2016


Hello,

Am Freitag, 22. Juli 2016, 16:24:26 CEST schrieb Christian Boltz:
> $subject.
> 
> This is needed for winbindd, but smbd could also need it.
> 
> References: https://bugzilla.opensuse.org/show_bug.cgi?id=990006

I forgot my usual note for profile updates:

I propose this patch for trunk, 2.10 and 2.9.


> [ samba-libs.diff ]
> 
> === modified file 'profiles/apparmor.d/abstractions/samba'
> --- profiles/apparmor.d/abstractions/samba      2015-05-18 23:25:26
> +0000 +++ profiles/apparmor.d/abstractions/samba      2016-07-22
> 14:21:08 +0000 @@ -10,6 +10,7 @@
>  # ------------------------------------------------------------------
> 
>    /etc/samba/* r,
> +  /usr/lib*/ldb/*.so mr,
>    /usr/share/samba/*.dat r,
>    /usr/share/samba/codepages/{lowcase,upcase,valid}.dat r,
>    /var/cache/samba/ w,


Regards,

Christian Boltz
-- 
Aber das ist dann ungefähr so filigran wie mit 'nem Rambock die Haustür
aufzumachen, nur weil man den Schlüssel tief im Rucksack verbuddelt hat.
[Peer Heinlein in postfixbuch-users]
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: This is a digitally signed message part.
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20160722/600e313c/attachment.pgp>


More information about the AppArmor mailing list