[apparmor] [patch] Allow /var/cache/samba/lck/* in abstractions/samba

[Seth Arnold]

On Wed, Nov 16, 2016 at 10:13:30PM +0100, Christian Boltz wrote:
> Hello,
> 
> Am Dienstag, 25. Oktober 2016, 20:26:07 CET schrieb Christian Boltz:
> > nmbd, winbindd (and most probably also smbd - but it has a more
> > permissive profile that already allows this) need rw access to
> > /var/cache/samba/lck/* on Debian 8.6.
> > 
> > Reported by FLD on IRC.
> > 
> > 
> > I propose this patch for trunk, 2.10 and 2.9.
> 
> Any comments or reviews on this patch?
> 
> If nobody objects, I'll commit it on Friday as Acked-by <timeout>.

Acked-by: Seth Arnold <seth.arnold at canonical.com>

Thanks

> 
> > [ abstractions-samba-lck.diff ]
> > 
> > --- profiles/apparmor.d/abstractions/samba      2016-10-14
> > 00:35:27.514276563 +0200 +++ profiles/apparmor.d/abstractions/samba  
> >    2016-10-25 20:21:09.330928549 +0200 @@ -16,6 +16,7 @@
> >    /usr/share/samba/*.dat r,
> >    /usr/share/samba/codepages/{lowcase,upcase,valid}.dat r,
> >    /var/cache/samba/ w,
> > +  /var/cache/samba/lck/* rw,
> >    /var/lib/samba/** rwk,
> >    /var/log/samba/cores/ rw,
> >    /var/log/samba/cores/** rw,
> 
> 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20161118/2403610e/attachment.pgp>