On Fri, Jul 22, 2016 at 04:29:07PM +0200, Christian Boltz wrote:
> > This is needed for winbindd, but smbd could also need it.
> > References: https://bugzilla.opensuse.org/show_bug.cgi?id=990006
> I forgot my usual note for profile updates:
> I propose this patch for trunk, 2.10 and 2.9.

Does this make sense for <abstractions/base> instead? We mostly don't
care about denying access to libraries.

I don't mind this though so:

Acked-by: Seth Arnold <[email protected]> for all branches
at your discretion.

Thanks

> 
> > [ samba-libs.diff ]
> > 
> > === modified file 'profiles/apparmor.d/abstractions/samba'
> > --- profiles/apparmor.d/abstractions/samba      2015-05-18 23:25:26
> > +0000 +++ profiles/apparmor.d/abstractions/samba      2016-07-22
> > 14:21:08 +0000 @@ -10,6 +10,7 @@
> >  # ------------------------------------------------------------------
> > 
> >    /etc/samba/* r,
> > +  /usr/lib*/ldb/*.so mr,
> >    /usr/share/samba/*.dat r,
> >    /usr/share/samba/codepages/{lowcase,upcase,valid}.dat r,
> >    /var/cache/samba/ w,
> 

Attachment: signature.asc
Description: PGP signature

-- 
AppArmor mailing list
[email protected]
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/apparmor

Reply via email to