mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-22 18:17:09 +00:00
Code Issues Releases Wiki Activity

profiles: update samba profiles

Browse Source 
- allow smbd to load new shared libraries
- allow winbindd to read and write new kerberos cache location

Based on a patch by "Samuel Cabrero" <scabrero@suse.com>

(cherry picked from commit 23b5f29b80582aacd23fb63c026cdf7c0dc21233)

References: https://bugzilla.opensuse.org/show_bug.cgi?id=1092099

Acked-by: Steve Beattie <steve@nxnw.org>
PR: https://gitlab.com/apparmor/apparmor/merge_requests/121
This commit is contained in:
Christian Boltz 2018-05-09 21:00:30 +02:00 committed by Steve Beattie
parent 8c2371a7cd
commit 3ae5be33e2
No known key found for this signature in database
GPG Key ID: 2F099E8D005E81F4
2 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
profiles/apparmor.d/usr.sbin.smbd
View File

@ -28,8 +28,9 @@
@{PROC}/@{pid}/mounts r, @{PROC}/@{pid}/mounts r,
@{PROC}/sys/kernel/core_pattern r, @{PROC}/sys/kernel/core_pattern r,
/usr/lib*/samba/vfs/*.so mr, /usr/lib*/samba/vfs/*.so mr,
/usr/lib*/samba/auth/*.so mr,
/usr/lib*/samba/charset/*.so mr, /usr/lib*/samba/charset/*.so mr,
/usr/lib*/samba/auth/script.so mr, /usr/lib*/samba/gensec/*.so mr,
/usr/lib*/samba/pdb/*.so mr, /usr/lib*/samba/pdb/*.so mr,
/usr/lib*/samba/{lowcase,upcase,valid}.dat r, /usr/lib*/samba/{lowcase,upcase,valid}.dat r,
/usr/sbin/smbd mr, /usr/sbin/smbd mr,

1
profiles/apparmor.d/usr.sbin.winbindd
View File

@ -34,6 +34,7 @@
/{var/,}run/samba/winbindd.pid rwk, /{var/,}run/samba/winbindd.pid rwk,
/{var/,}run/samba/winbindd/ rw, /{var/,}run/samba/winbindd/ rw,
/{var/,}run/samba/winbindd/pipe w, /{var/,}run/samba/winbindd/pipe w,
/{var/,}run/user/*/krb5cc/* rwk,
# Site-specific additions and overrides. See local/README for details. # Site-specific additions and overrides. See local/README for details.
#include <local/usr.sbin.winbindd> #include <local/usr.sbin.winbindd>