[Apparmor-dev] [rfr] new profile abstractions

Seth Arnold seth.arnold at suse.de
Tue Aug 28 18:04:00 MDT 2007


On Tue, Aug 14, 2007 at 04:06:46PM -0400, Mathias Gug wrote:
> --- upstream-trunk/profiles/apparmor.d/abstractions/samba	1969-12-31 19:00:00.000000000 -0500
> +++ ubuntu-mathiaz/profiles/apparmor.d/abstractions/samba	2007-08-06 16:23:09.000000000 -0400
> @@ -0,0 +1,8 @@
> +
> +  /etc/samba/smb.conf r,
> +  /usr/share/samba/*.dat mr,
> +  /var/lib/samba/**.tdb mrw,
> +  /var/log/samba/cores/* w,
> +  /var/log/samba/log.* w,
> +  /var/run/samba/*.tdb mrw,

Why does samba require 'mrw' access to these? o_O

Is this shared for smbd/nmbd? Which other profiles would use this?

Thanks
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://forge.novell.com/pipermail/apparmor-dev/attachments/20070828/c4017daf/attachment.pgp


More information about the Apparmor-dev mailing list