4312257819
- update to AppArmor 3.0.5 - several additions to profiles and abstractions - bugfixes in parser and utils - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.5 for the detailed upstream changelog - remove upstream(ed) patchs: - apparmor-setuptools61-mr897.patch - dovecot-profiles-boo1199535-mr881.diff - php8-fpm-mr876.patch - python310-help-mr848.patch - samba-new-dcerpcd.patch - samba_deny_net_admin.patch - update-samba-bgqd.diff - update-usr-sbin-smbd.diff - apparmor-samba-include-permissions-for-shares.diff: remove upstreamed part - add dirtest-sort-mr900.diff to fix random test failures - change apache-extra-profile-include-if-exists.diff to the post-mv path (new quilt executes mv) - stop disabling lto (fixed upstream) (boo#1133091) - package profile-load script in -parser OBS-URL: https://build.opensuse.org/request/show/991157 OBS-URL: https://build.opensuse.org/package/show/security:apparmor/apparmor?expand=0&rev=342
27 lines
950 B
Diff
27 lines
950 B
Diff
Samba generates a profile sniplet with permissions for all shares at
|
|
start using the update-apparmor-samba-profile script.
|
|
|
|
After the include rules were upstreamed in AppArmor 3.0.5 (MR 838), this
|
|
patch was shortened. Now it "only" creates a dummy profile sniplet
|
|
because update-apparmor-samba-profiles on Leap 15.3 and 15.4 aborts if
|
|
the local/ sniplet doesn't exist.
|
|
|
|
Tumbleweed does not rely on a pre-existing local/usr.sbin.smbd-shares
|
|
anymore, therefore the patch gets skipped there in the spec.
|
|
|
|
|
|
References: https://bugzilla.novell.com/show_bug.cgi?id=688040
|
|
|
|
|
|
Signed-off-by: Christian Boltz <apparmor@cboltz.de>
|
|
|
|
|
|
=== added file 'profiles/apparmor.d/local/usr.sbin.smbd-shares'
|
|
--- profiles/apparmor.d/local/usr.sbin.smbd-shares 1970-01-01 00:00:00 +0000
|
|
+++ profiles/apparmor.d/local/usr.sbin.smbd-shares 2011-10-19 09:40:05 +0000
|
|
@@ -0,0 +1,2 @@
|
|
+# This file will be replaced by rules for all samba shares at samba start.
|
|
+# Do not edit!
|
|
|
|
|