mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-29 13:28:19 +00:00
Code Issues Releases Wiki Activity

Merge samba profiles: support paths used by Arch Linux

Browse Source 
On Arch Linux `rpcd_classic`, `rpcd_epmapper`, `rpcd_fsrvp`, `rpcd_lsad`, `rpcd_mdssvc`, `rpcd_rpcecho`, `rpcd_spoolss`, `rpcd_winreg`, `samba-bgqd`, `samba-dcerpcd` and `smbspool_krb5_wrapper` are in `/usr/lib/samba/samba/`.

See https://archlinux.org/packages/extra/x86_64/samba/files/ and https://bugs.archlinux.org/task/74614.

MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/883
Approved-by: Christian Boltz <apparmor@cboltz.de>
Merged-by: Christian Boltz <apparmor@cboltz.de>
This commit is contained in:
Christian Boltz 2022-06-06 10:53:53 +00:00
commit 48fc233d05
7 changed files with 17 additions and 17 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
profiles/apparmor.d/samba-bgqd
View File

@ -2,7 +2,7 @@ abi <abi/3.0>,
include <tunables/global>
profile samba-bgqd /usr/lib*/samba/samba-bgqd {
profile samba-bgqd /usr/lib*/samba/{,samba/}samba-bgqd {
include <abstractions/base>
include <abstractions/cups-client>
include <abstractions/nameservice>
@ -16,7 +16,7 @@ profile samba-bgqd /usr/lib*/samba/samba-bgqd {
@{run}/samba/samba-bgqd.pid wk,
/usr/lib*/samba/samba-bgqd m,
/usr/lib*/samba/{,samba/}samba-bgqd m,
# Site-specific additions and overrides. See local/README for details.
include if exists <local/samba-bgqd>

10
profiles/apparmor.d/samba-dcerpcd
View File

@ -13,16 +13,16 @@ abi <abi/3.0>,
include <tunables/global>
profile samba-dcerpcd /usr/lib*/samba/samba-dcerpcd {
profile samba-dcerpcd /usr/lib*/samba/{,samba/}samba-dcerpcd {
include <abstractions/samba-rpcd>
@{run}/samba/samba-dcerpcd.pid wk,
/usr/lib*/samba/samba-dcerpcd m,
/usr/lib*/samba/{,samba/}samba-dcerpcd m,
/usr/lib*/samba/rpcd_{mdssvc,epmapper,rpcecho,fsrvp,lsad,winreg} Px -> samba-rpcd,
/usr/lib*/samba/rpcd_classic Px -> samba-rpcd-classic,
/usr/lib*/samba/rpcd_spoolss Px -> samba-rpcd-spoolss,
/usr/lib*/samba/{,samba/}rpcd_{mdssvc,epmapper,rpcecho,fsrvp,lsad,winreg} Px -> samba-rpcd,
/usr/lib*/samba/{,samba/}rpcd_classic Px -> samba-rpcd-classic,
/usr/lib*/samba/{,samba/}rpcd_spoolss Px -> samba-rpcd-spoolss,
@{run}/samba/ncalrpc/ rw,
@{run}/samba/ncalrpc/** rw,

4
profiles/apparmor.d/samba-rpcd
View File

@ -13,9 +13,9 @@ abi <abi/3.0>,
include <tunables/global>
profile samba-rpcd /usr/lib*/samba/rpcd_{mdssvc,epmapper,rpcecho,fsrvp,lsad,winreg} {
profile samba-rpcd /usr/lib*/samba/{,samba/}rpcd_{mdssvc,epmapper,rpcecho,fsrvp,lsad,winreg} {
include <abstractions/samba-rpcd>
/usr/lib*/samba/rpcd_{mdssvc,epmapper,rpcecho,fsrvp,lsad,winreg} m,
/usr/lib*/samba/{,samba/}rpcd_{mdssvc,epmapper,rpcecho,fsrvp,lsad,winreg} m,
# Site-specific additions and overrides. See local/README for details.
include if exists <local/samba-rpcd>
}

4
profiles/apparmor.d/samba-rpcd-classic
View File

@ -13,11 +13,11 @@ abi <abi/3.0>,
include <tunables/global>
profile samba-rpcd-classic /usr/lib*/samba/rpcd_classic {
profile samba-rpcd-classic /usr/lib*/samba/{,samba/}rpcd_classic {
include <abstractions/samba-rpcd>
include <abstractions/wutmp>
/usr/lib*/samba/rpcd_classic m,
/usr/lib*/samba/{,samba/}rpcd_classic m,
# Site-specific additions and overrides. See local/README for details.
include if exists <local/samba-rpcd-classic>

6
profiles/apparmor.d/samba-rpcd-spoolss
View File

@ -13,11 +13,11 @@ abi <abi/3.0>,
include <tunables/global>
profile samba-rpcd-spoolss /usr/lib*/samba/rpcd_spoolss {
profile samba-rpcd-spoolss /usr/lib*/samba/{,samba/}rpcd_spoolss {
include <abstractions/samba-rpcd>
/usr/lib*/samba/rpcd_spoolss m,
/usr/lib*/samba/samba-bgqd Px -> samba-bgqd,
/usr/lib*/samba/{,samba/}rpcd_spoolss m,
/usr/lib*/samba/{,samba/}samba-bgqd Px -> samba-bgqd,
# Site-specific additions and overrides. See local/README for details.
include if exists <local/samba-rpcd-spoolss>

4
profiles/apparmor.d/usr.sbin.smbd
View File

@ -38,8 +38,8 @@ profile smbd /usr/{bin,sbin}/smbd {
/usr/lib*/samba/charset/*.so mr,
/usr/lib*/samba/gensec/*.so mr,
/usr/lib*/samba/pdb/*.so mr,
/usr/lib*/samba/samba-bgqd Px -> samba-bgqd,
/usr/lib*/samba/samba-dcerpcd Px -> samba-dcerpcd,
/usr/lib*/samba/{,samba/}samba-bgqd Px -> samba-bgqd,
/usr/lib*/samba/{,samba/}samba-dcerpcd Px -> samba-dcerpcd,
/usr/lib*/samba/{lowcase,upcase,valid}.dat r,
/usr/lib/@{multiarch}/samba/*.so{,.[0-9]*} mr,
/usr/lib/@{multiarch}/samba/**/ r,

2
profiles/apparmor.d/usr.sbin.winbindd
View File

@ -26,7 +26,7 @@ profile winbindd /usr/{bin,sbin}/winbindd {
/usr/lib*/samba/idmap/*.so mr,
/usr/lib*/samba/nss_info/*.so mr,
/usr/lib*/samba/pdb/*.so mr,
/usr/lib*/samba/samba-dcerpcd Px -> samba-dcerpcd,
/usr/lib*/samba/{,samba/}samba-dcerpcd Px -> samba-dcerpcd,
/usr/{bin,sbin}/winbindd mr,
/var/cache/krb5rcache/* rwk,
/var/cache/samba/*.tdb rwk,