a50868b293
- update to AppArmor 2.13.2 - add profile names to most profiles - update dnsmasq profile (pid file and logfile path) (boo#1111342) - add vulkan abstraction - add letsencrypt certificate path to abstractions/ssl_* - ignore *.orig and *.rej files when loading profiles - fix aa-complain etc. to handle named profiles - several bugfixes and small profile improvements - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - remove upstreamed fix-syntax-error-in-rc.apparmor.functions.patch - update to 2.13.1 - add qt5 and qt5-compose-cache-write abstractions - add @{uid} and @{uids} kernel var placeholders - several profile and abstraction updates - ignore "abi" rules in parser and tools (instead of erroring out) - utils: fix overwriting of child profile flags if they differ from the main profile - several bugfixes (including boo#1100779) - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog - remove upstream(ed) patches: - aa-teardown-path.diff - fix-apparmor-systemd-perms.diff - logprof-skip-cache-d.diff - fix-samba-profiles.patch - make-pyflakes-happy.diff - dnsmasq-Add-permission-to-open-log-files.patch - refresh apparmor-samba-include-permissions-for-shares.diff - add fix-syntax-error-in-rc.apparmor.functions.patch - update to AppArmor 2.13.2 - no changes in libapparmor - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.2 for the detailed upstream changelog - update to AppArmor 2.13.1 - several bug fixes - see https://gitlab.com/apparmor/apparmor/wikis/Release_Notes_2.13.1 for the detailed upstream changelog OBS-URL: https://build.opensuse.org/request/show/660558 OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=224
35 lines
1.2 KiB
Diff
35 lines
1.2 KiB
Diff
Samba generates a profile sniplet with permissions for all shares at
|
|
start using the update-apparmor-samba-profile script.
|
|
|
|
This patch includes the autogenerated profile sniplet it in the smbd
|
|
profile. It also creates a dummy profile sniplet to avoid "file not
|
|
found" errors when AppArmor is started before samba was started.
|
|
|
|
References: https://bugzilla.novell.com/show_bug.cgi?id=688040
|
|
|
|
|
|
Signed-off-by: Christian Boltz <apparmor@cboltz.de>
|
|
|
|
=== added file 'profiles/apparmor.d/local/usr.sbin.smbd-shares'
|
|
--- profiles/apparmor.d/local/usr.sbin.smbd-shares 1970-01-01 00:00:00 +0000
|
|
+++ profiles/apparmor.d/local/usr.sbin.smbd-shares 2011-10-19 09:40:05 +0000
|
|
@@ -0,0 +1,2 @@
|
|
+# This file will be replaced by rules for all samba shares at samba start.
|
|
+# Do not edit!
|
|
|
|
=== modified file 'profiles/apparmor.d/usr.sbin.smbd'
|
|
--- profiles/apparmor.d/usr.sbin.smbd 2011-08-27 18:50:42 +0000
|
|
+++ profiles/apparmor.d/usr.sbin.smbd 2011-10-19 09:37:04 +0000
|
|
@@ -55,6 +55,10 @@
|
|
|
|
@{HOMEDIRS}/** lrwk,
|
|
|
|
+ # permissions for all configured shares
|
|
+ # autogenerated by update-apparmor-samba-profile at samba start
|
|
+ #include <local/usr.sbin.smbd-shares>
|
|
+
|
|
# Site-specific additions and overrides. See local/README for details.
|
|
#include <local/usr.sbin.smbd>
|
|
}
|
|
|