2011-10-19 11:56:25 +00:00
|
|
|
Samba generates a profile sniplet with permissions for all shares at
|
|
|
|
|
start using the update-apparmor-samba-profile script.
|
|
|
|
|
|
|
|
|
|
This patch includes the autogenerated profile sniplet it in the smbd
|
|
|
|
|
profile. It also creates a dummy profile sniplet to avoid "file not
|
|
|
|
|
found" errors when AppArmor is started before samba was started.
|
|
|
|
|
|
|
|
|
|
References: https://bugzilla.novell.com/show_bug.cgi?id=688040
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Signed-off-by: Christian Boltz <apparmor@cboltz.de>
|
|
|
|
|
|
|
|
|
|
=== added file 'profiles/apparmor.d/local/usr.sbin.smbd-shares'
|
|
|
|
|
--- profiles/apparmor.d/local/usr.sbin.smbd-shares 1970-01-01 00:00:00 +0000
|
|
|
|
|
+++ profiles/apparmor.d/local/usr.sbin.smbd-shares 2011-10-19 09:40:05 +0000
|
|
|
|
|
@@ -0,0 +1,2 @@
|
|
|
|
|
+# This file will be replaced by rules for all samba shares at samba start.
|
|
|
|
|
+# Do not edit!
|
|
|
|
|
|
|
|
|
|
=== modified file 'profiles/apparmor.d/usr.sbin.smbd'
|
|
|
|
|
--- profiles/apparmor.d/usr.sbin.smbd 2011-08-27 18:50:42 +0000
|
|
|
|
|
+++ profiles/apparmor.d/usr.sbin.smbd 2011-10-19 09:37:04 +0000
|
- update to AppArmor 2.10.1 (2.10 branch r3326):
- fix incorrect output of child profile names (apparmor_parser -N) which
caused 'rcapparmor reload' to remove child profiles and hats (lp#1551950)
- fix a crash in aa-logprof / logparser.py for change_hat log events
(lp#1523297) and log events that look like file events, but aren't
(lp#1540562, lp#1525119, lp#1466812)
- write unix rules when saving a profile (lp#1522938, boo#954104#c3)
- several fixes for variable handling in aa-logprof
- map c (create) log events to w instead of a
- add python to the "no Px rule" list in logprof.conf
- let aa-logprof check for duplicate profiles
- let aa-status work without the apparmor.fail python module (boo#971917,
lp#1480492)
- add permissions in several profiles (including boo#948584, boo#948753,
boo#954959, boo#954958, boo#971790, boo#964971, boo#921098, boo#923201 and
boo#921098#c15).
- and many more fixes, see the full changelog at
http://wiki.apparmor.net/index.php/ReleaseNotes_2_10_1
- drop upstream(ed) patches:
- fix-initscript-aa_log_end_msg.diff
- syslog-ng-profile-boo948584.diff
- upstream-profile-updates-r3205-3241.diff
- refresh patches:
- apparmor-abstractions-no-multiline.diff
- apparmor-samba-include-permissions-for-shares.diff
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=147
2016-04-22 22:33:49 +00:00
|
|
|
@@ -47,6 +47,10 @@
|
2011-10-19 11:56:25 +00:00
|
|
|
|
|
|
|
|
@{HOMEDIRS}/** lrwk,
|
|
|
|
|
|
|
|
|
|
+ # permissions for all configured shares
|
|
|
|
|
+ # autogenerated by update-apparmor-samba-profile at samba start
|
|
|
|
|
+ #include <local/usr.sbin.smbd-shares>
|
|
|
|
|
+
|
|
|
|
|
# Site-specific additions and overrides. See local/README for details.
|
|
|
|
|
#include <local/usr.sbin.smbd>
|
|
|
|
|
}
|
|
|
|
|
|
