Accepting request 239579 from home:dmdiss:bnc885317_clustered_samba_apparmor

- add apparmor-profiles-clustered-samba.diff to permit clustered Samba
  access to CTDB socket and databases (bnc#885317)

OBS-URL: https://build.opensuse.org/request/show/239579
OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=87

apparmor-profiles-clustered-samba.diff

@@ -0,0 +1,10 @@
+=== modified file 'profiles/apparmor.d/abstractions/samba'
+--- profiles/apparmor.d/abstractions/samba	2013-12-23 21:15:47 +0000
++++ profiles/apparmor.d/abstractions/samba	2014-07-04 10:03:10 +0000
+@@ -20,3 +20,5 @@
+   /{,var/}run/samba/ w,
+   /{,var/}run/samba/*.tdb rw,
+ 
++  # required for clustering
++  /var/lib/ctdb/** rwk,
+

apparmor.changes

@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Thu Jul  3 14:45:14 UTC 2014 - ddiss@suse.com
+
+- add apparmor-profiles-clustered-samba.diff to permit clustered Samba
+  access to CTDB socket and databases (bnc#885317)
+
 -------------------------------------------------------------------
 Tue Apr  1 16:06:24 UTC 2014 - lmuelle@suse.com
 

apparmor.spec

@@ -119,6 +119,9 @@ Patch22:        ruby-2_0-mkmf-destdir.patch
 # commited upstream trunk r2323, 2.8 branch r2110 - updated version commited trunk r2385, 2.8 r2123
 Patch23:        apparmor-2.8.2-nm-dnsmasq-config.patch
 
+# Permit clustered Samba access to CTDB socket and databases (bnc#885317)
+Patch24:        apparmor-profiles-clustered-samba.diff
+
 Url:            https://launchpad.net/apparmor
 PreReq:         sed
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
@@ -502,6 +505,8 @@ SubDomain.
 %patch23
 %endif
 
+%patch24
+
 # profile for winbindd (bnc#748499, commited upstream trunk r2078, updated in trunk r2328)
 test ! -e profiles/apparmor.d/usr.sbin.winbindd
 cp %{SOURCE10} profiles/apparmor.d/