mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-09-01 06:45:38 +00:00
Code Issues Releases Wiki Activity

samba profiles: support paths used by Arch Linux

Browse Source 
On Arch Linux rpcd_classic, rpcd_epmapper, rpcd_fsrvp, rpcd_lsad, rpcd_mdssvc, rpcd_rpcecho, rpcd_spoolss, rpcd_winreg, samba-bgqd, samba-dcerpcd and smbspool_krb5_wrapper are in /usr/lib/samba/samba/.
See https://archlinux.org/packages/extra/x86_64/samba/files/ and https://bugs.archlinux.org/task/74614.
This commit is contained in:
nl6720
2022-06-06 11:57:14 +03:00
parent 2a3140cb93
commit deadcc0d11
7 changed files with 17 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
profiles/apparmor.d/samba-bgqd
View File

@@ -2,7 +2,7 @@ abi <abi/3.0>,
include <tunables/global>
profile samba-bgqd /usr/lib*/samba/samba-bgqd {
profile samba-bgqd /usr/lib*/samba/{,samba/}samba-bgqd {
include <abstractions/base>
include <abstractions/cups-client>
include <abstractions/nameservice>
@@ -16,7 +16,7 @@ profile samba-bgqd /usr/lib*/samba/samba-bgqd {
@{run}/samba/samba-bgqd.pid wk,
/usr/lib*/samba/samba-bgqd m,
/usr/lib*/samba/{,samba/}samba-bgqd m,
# Site-specific additions and overrides. See local/README for details.
include if exists <local/samba-bgqd>

10
profiles/apparmor.d/samba-dcerpcd
View File

@@ -13,16 +13,16 @@ abi <abi/3.0>,
include <tunables/global>
profile samba-dcerpcd /usr/lib*/samba/samba-dcerpcd {
profile samba-dcerpcd /usr/lib*/samba/{,samba/}samba-dcerpcd {
include <abstractions/samba-rpcd>
@{run}/samba/samba-dcerpcd.pid wk,
/usr/lib*/samba/samba-dcerpcd m,
/usr/lib*/samba/{,samba/}samba-dcerpcd m,
/usr/lib*/samba/rpcd_{mdssvc,epmapper,rpcecho,fsrvp,lsad,winreg} Px -> samba-rpcd,
/usr/lib*/samba/rpcd_classic Px -> samba-rpcd-classic,
/usr/lib*/samba/rpcd_spoolss Px -> samba-rpcd-spoolss,
/usr/lib*/samba/{,samba/}rpcd_{mdssvc,epmapper,rpcecho,fsrvp,lsad,winreg} Px -> samba-rpcd,
/usr/lib*/samba/{,samba/}rpcd_classic Px -> samba-rpcd-classic,
/usr/lib*/samba/{,samba/}rpcd_spoolss Px -> samba-rpcd-spoolss,
@{run}/samba/ncalrpc/ rw,
@{run}/samba/ncalrpc/** rw,

4
profiles/apparmor.d/samba-rpcd
View File

@@ -13,9 +13,9 @@ abi <abi/3.0>,
include <tunables/global>
profile samba-rpcd /usr/lib*/samba/rpcd_{mdssvc,epmapper,rpcecho,fsrvp,lsad,winreg} {
profile samba-rpcd /usr/lib*/samba/{,samba/}rpcd_{mdssvc,epmapper,rpcecho,fsrvp,lsad,winreg} {
include <abstractions/samba-rpcd>
/usr/lib*/samba/rpcd_{mdssvc,epmapper,rpcecho,fsrvp,lsad,winreg} m,
/usr/lib*/samba/{,samba/}rpcd_{mdssvc,epmapper,rpcecho,fsrvp,lsad,winreg} m,
# Site-specific additions and overrides. See local/README for details.
include if exists <local/samba-rpcd>
}

4
profiles/apparmor.d/samba-rpcd-classic
View File

@@ -13,11 +13,11 @@ abi <abi/3.0>,
include <tunables/global>
profile samba-rpcd-classic /usr/lib*/samba/rpcd_classic {
profile samba-rpcd-classic /usr/lib*/samba/{,samba/}rpcd_classic {
include <abstractions/samba-rpcd>
include <abstractions/wutmp>
/usr/lib*/samba/rpcd_classic m,
/usr/lib*/samba/{,samba/}rpcd_classic m,
# Site-specific additions and overrides. See local/README for details.
include if exists <local/samba-rpcd-classic>

6
profiles/apparmor.d/samba-rpcd-spoolss
View File

@@ -13,11 +13,11 @@ abi <abi/3.0>,
include <tunables/global>
profile samba-rpcd-spoolss /usr/lib*/samba/rpcd_spoolss {
profile samba-rpcd-spoolss /usr/lib*/samba/{,samba/}rpcd_spoolss {
include <abstractions/samba-rpcd>
/usr/lib*/samba/rpcd_spoolss m,
/usr/lib*/samba/samba-bgqd Px -> samba-bgqd,
/usr/lib*/samba/{,samba/}rpcd_spoolss m,
/usr/lib*/samba/{,samba/}samba-bgqd Px -> samba-bgqd,
# Site-specific additions and overrides. See local/README for details.
include if exists <local/samba-rpcd-spoolss>

4
profiles/apparmor.d/usr.sbin.smbd
View File

@@ -38,8 +38,8 @@ profile smbd /usr/{bin,sbin}/smbd {
/usr/lib*/samba/charset/*.so mr,
/usr/lib*/samba/gensec/*.so mr,
/usr/lib*/samba/pdb/*.so mr,
/usr/lib*/samba/samba-bgqd Px -> samba-bgqd,
/usr/lib*/samba/samba-dcerpcd Px -> samba-dcerpcd,
/usr/lib*/samba/{,samba/}samba-bgqd Px -> samba-bgqd,
/usr/lib*/samba/{,samba/}samba-dcerpcd Px -> samba-dcerpcd,
/usr/lib*/samba/{lowcase,upcase,valid}.dat r,
/usr/lib/@{multiarch}/samba/*.so{,.[0-9]*} mr,
/usr/lib/@{multiarch}/samba/**/ r,

2
profiles/apparmor.d/usr.sbin.winbindd
View File

@@ -26,7 +26,7 @@ profile winbindd /usr/{bin,sbin}/winbindd {
/usr/lib*/samba/idmap/*.so mr,
/usr/lib*/samba/nss_info/*.so mr,
/usr/lib*/samba/pdb/*.so mr,
/usr/lib*/samba/samba-dcerpcd Px -> samba-dcerpcd,
/usr/lib*/samba/{,samba/}samba-dcerpcd Px -> samba-dcerpcd,
/usr/{bin,sbin}/winbindd mr,
/var/cache/krb5rcache/* rwk,
/var/cache/samba/*.tdb rwk,