From 06f70bd7e306d4117c28f5d662f6f40b69ee4316025073b60fd9c7c6333b65f9 Mon Sep 17 00:00:00 2001 From: Christian Boltz Date: Tue, 15 Jul 2014 21:37:38 +0000 Subject: [PATCH] Accepting request 239579 from home:dmdiss:bnc885317_clustered_samba_apparmor - add apparmor-profiles-clustered-samba.diff to permit clustered Samba access to CTDB socket and databases (bnc#885317) OBS-URL: https://build.opensuse.org/request/show/239579 OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=87 --- apparmor-profiles-clustered-samba.diff | 10 ++++++++++ apparmor.changes | 6 ++++++ apparmor.spec | 5 +++++ 3 files changed, 21 insertions(+) create mode 100644 apparmor-profiles-clustered-samba.diff diff --git a/apparmor-profiles-clustered-samba.diff b/apparmor-profiles-clustered-samba.diff new file mode 100644 index 0000000..8cfff88 --- /dev/null +++ b/apparmor-profiles-clustered-samba.diff @@ -0,0 +1,10 @@ +=== modified file 'profiles/apparmor.d/abstractions/samba' +--- profiles/apparmor.d/abstractions/samba 2013-12-23 21:15:47 +0000 ++++ profiles/apparmor.d/abstractions/samba 2014-07-04 10:03:10 +0000 +@@ -20,3 +20,5 @@ + /{,var/}run/samba/ w, + /{,var/}run/samba/*.tdb rw, + ++ # required for clustering ++ /var/lib/ctdb/** rwk, + diff --git a/apparmor.changes b/apparmor.changes index 8f28049..fd1239c 100644 --- a/apparmor.changes +++ b/apparmor.changes @@ -1,3 +1,9 @@ +------------------------------------------------------------------- +Thu Jul 3 14:45:14 UTC 2014 - ddiss@suse.com + +- add apparmor-profiles-clustered-samba.diff to permit clustered Samba + access to CTDB socket and databases (bnc#885317) + ------------------------------------------------------------------- Tue Apr 1 16:06:24 UTC 2014 - lmuelle@suse.com diff --git a/apparmor.spec b/apparmor.spec index 86a4029..99d226d 100644 --- a/apparmor.spec +++ b/apparmor.spec @@ -119,6 +119,9 @@ Patch22: ruby-2_0-mkmf-destdir.patch # commited upstream trunk r2323, 2.8 branch r2110 - updated version commited trunk r2385, 2.8 r2123 Patch23: apparmor-2.8.2-nm-dnsmasq-config.patch +# Permit clustered Samba access to CTDB socket and databases (bnc#885317) +Patch24: apparmor-profiles-clustered-samba.diff + Url: https://launchpad.net/apparmor PreReq: sed BuildRoot: %{_tmppath}/%{name}-%{version}-build @@ -502,6 +505,8 @@ SubDomain. %patch23 %endif +%patch24 + # profile for winbindd (bnc#748499, commited upstream trunk r2078, updated in trunk r2328) test ! -e profiles/apparmor.d/usr.sbin.winbindd cp %{SOURCE10} profiles/apparmor.d/