[apparmor] [patch] Allow mr for /usr/lib*/ldb/*.so in samba abstractions

[Seth Arnold]

On Fri, Jul 22, 2016 at 04:29:07PM +0200, Christian Boltz wrote:
> > This is needed for winbindd, but smbd could also need it.
> > References: https://bugzilla.opensuse.org/show_bug.cgi?id=990006
> I forgot my usual note for profile updates:
> I propose this patch for trunk, 2.10 and 2.9.

Does this make sense for <abstractions/base> instead? We mostly don't
care about denying access to libraries.

I don't mind this though so:

Acked-by: Seth Arnold <seth.arnold at canonical.com> for all branches
at your discretion.

Thanks

> 
> > [ samba-libs.diff ]
> > 
> > === modified file 'profiles/apparmor.d/abstractions/samba'
> > --- profiles/apparmor.d/abstractions/samba      2015-05-18 23:25:26
> > +0000 +++ profiles/apparmor.d/abstractions/samba      2016-07-22
> > 14:21:08 +0000 @@ -10,6 +10,7 @@
> >  # ------------------------------------------------------------------
> > 
> >    /etc/samba/* r,
> > +  /usr/lib*/ldb/*.so mr,
> >    /usr/share/samba/*.dat r,
> >    /usr/share/samba/codepages/{lowcase,upcase,valid}.dat r,
> >    /var/cache/samba/ w,
> 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20160722/a4ac877d/attachment.pgp>