[apparmor] [patch] Allow /var/cache/samba/lck/* in abstractions/samba

[Christian Boltz]

Hello,

Am Dienstag, 25. Oktober 2016, 20:26:07 CET schrieb Christian Boltz:
> nmbd, winbindd (and most probably also smbd - but it has a more
> permissive profile that already allows this) need rw access to
> /var/cache/samba/lck/* on Debian 8.6.
> 
> Reported by FLD on IRC.
> 
> 
> I propose this patch for trunk, 2.10 and 2.9.

Any comments or reviews on this patch?

If nobody objects, I'll commit it on Friday as Acked-by <timeout>.

> [ abstractions-samba-lck.diff ]
> 
> --- profiles/apparmor.d/abstractions/samba      2016-10-14
> 00:35:27.514276563 +0200 +++ profiles/apparmor.d/abstractions/samba  
>    2016-10-25 20:21:09.330928549 +0200 @@ -16,6 +16,7 @@
>    /usr/share/samba/*.dat r,
>    /usr/share/samba/codepages/{lowcase,upcase,valid}.dat r,
>    /var/cache/samba/ w,
> +  /var/cache/samba/lck/* rw,
>    /var/lib/samba/** rwk,
>    /var/log/samba/cores/ rw,
>    /var/log/samba/cores/** rw,



Regards,

Christian Boltz
-- 
<Ohmmmmm> Heiliger St.Tux öffne mir die Augen, welche durch jahrelangen
Missbrauch von KleinSoftFenster 3.1 - XP mit Fehlermeldungen zuge-
pflastert wurden, damit ich sehend werde für die Wunder des Reiches
das da heißt LINUX.</Ohmmmmm> (Heike Hautz in dcoulm)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: This is a digitally signed message part.
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20161116/26b4ab9f/attachment.pgp>