mirrors/apparmor
1
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor.git synced 2025-03-04 16:35:02 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions
apparmor/profiles/apparmor.d/samba-rpcd

30 lines
903 B
Text
Raw Normal View History

profiles/apparmor.d: Add new profiles needed for samba-4.16 samba-4.16 has a completely new dcerpc subsystem, services that used to be built into the smbd daemon itself (and deployed in forked instances) are now hosted in standalone binaries. The following new binaries now need new profiles rpcd_classic rpcd_epmapper rpcd_fsrvp rpcd_lsad rpcd_mdssvc rpcd_rpcecho rpcd_spoolss rpcd_winreg samba-dcerpcd Mostly these are captured in a single common profile 'samba-rpcd' Additionally smbd & winbindd need new entries because they exec samba-dcerpcd Fixes: https://bugzilla.opensuse.org/show_bug.cgi?id=1198309 Signed-off-by: Noel Power <noel.power@suse.com>
2022-04-13 14:31:05 +01:00
# ------------------------------------------------------------------
#
# Copyright (C) 2022 SUSE LLC
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of version 2 of the GNU General Public
# License published by the Free Software Foundation.
#
# ------------------------------------------------------------------
# vim:syntax=apparmor
policy: update to use 4.0 abi Begin preparing policy for the 4.0 release. This may result in new denials. This is expected and needed to make sure policy is ready for the 4.0 release. Signed-off-by: John Johansen <john.johansen@canonical.com>
2023-06-30 23:36:12 -07:00
abi <abi/4.0>,
profiles/apparmor.d: Add new profiles needed for samba-4.16 samba-4.16 has a completely new dcerpc subsystem, services that used to be built into the smbd daemon itself (and deployed in forked instances) are now hosted in standalone binaries. The following new binaries now need new profiles rpcd_classic rpcd_epmapper rpcd_fsrvp rpcd_lsad rpcd_mdssvc rpcd_rpcecho rpcd_spoolss rpcd_winreg samba-dcerpcd Mostly these are captured in a single common profile 'samba-rpcd' Additionally smbd & winbindd need new entries because they exec samba-dcerpcd Fixes: https://bugzilla.opensuse.org/show_bug.cgi?id=1198309 Signed-off-by: Noel Power <noel.power@suse.com>
2022-04-13 14:31:05 +01:00
include <tunables/global>
samba profiles: support paths used by Arch Linux On Arch Linux rpcd_classic, rpcd_epmapper, rpcd_fsrvp, rpcd_lsad, rpcd_mdssvc, rpcd_rpcecho, rpcd_spoolss, rpcd_winreg, samba-bgqd, samba-dcerpcd and smbspool_krb5_wrapper are in /usr/lib/samba/samba/. See https://archlinux.org/packages/extra/x86_64/samba/files/ and https://bugs.archlinux.org/task/74614.
2022-06-06 11:57:14 +03:00
profile samba-rpcd /usr/lib*/samba/{,samba/}rpcd_{mdssvc,epmapper,rpcecho,fsrvp,lsad,winreg} {
profiles/apparmor.d: Add new profiles needed for samba-4.16 samba-4.16 has a completely new dcerpc subsystem, services that used to be built into the smbd daemon itself (and deployed in forked instances) are now hosted in standalone binaries. The following new binaries now need new profiles rpcd_classic rpcd_epmapper rpcd_fsrvp rpcd_lsad rpcd_mdssvc rpcd_rpcecho rpcd_spoolss rpcd_winreg samba-dcerpcd Mostly these are captured in a single common profile 'samba-rpcd' Additionally smbd & winbindd need new entries because they exec samba-dcerpcd Fixes: https://bugzilla.opensuse.org/show_bug.cgi?id=1198309 Signed-off-by: Noel Power <noel.power@suse.com>
2022-04-13 14:31:05 +01:00
include <abstractions/samba-rpcd>
profiles: add fixes for samba from issue #386 squash 2nd patch addressing issue in original patch in MR to have a clean MR. Fixes: https://gitlab.com/apparmor/apparmor/-/issues/386
2024-04-22 23:46:44 +00:00
capability sys_resource,
profiles/apparmor.d: Update samba profile Fixes: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1990692 Signed-off-by: Spyros Seimenis <spyros.seimenis@canonical.com>
2022-09-28 17:16:55 +03:00
/usr/lib*/samba/{,samba/}rpcd_{mdssvc,epmapper,rpcecho,fsrvp,lsad,winreg} mr,
profiles: add fixes for samba from issue #386 squash 2nd patch addressing issue in original patch in MR to have a clean MR. Fixes: https://gitlab.com/apparmor/apparmor/-/issues/386
2024-04-22 23:46:44 +00:00
@{run}/samba/ncalrpc/np/lsarpc wr,
@{run}/samba/ncalrpc/np/mdssvc wr,
profiles/apparmor.d: Update samba profile Fixes: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1990692 Signed-off-by: Spyros Seimenis <spyros.seimenis@canonical.com>
2022-09-28 17:16:55 +03:00
@{run}/samba/ncalrpc/np/winreg wr,
profiles/apparmor.d: Add new profiles needed for samba-4.16 samba-4.16 has a completely new dcerpc subsystem, services that used to be built into the smbd daemon itself (and deployed in forked instances) are now hosted in standalone binaries. The following new binaries now need new profiles rpcd_classic rpcd_epmapper rpcd_fsrvp rpcd_lsad rpcd_mdssvc rpcd_rpcecho rpcd_spoolss rpcd_winreg samba-dcerpcd Mostly these are captured in a single common profile 'samba-rpcd' Additionally smbd & winbindd need new entries because they exec samba-dcerpcd Fixes: https://bugzilla.opensuse.org/show_bug.cgi?id=1198309 Signed-off-by: Noel Power <noel.power@suse.com>
2022-04-13 14:31:05 +01:00
# Site-specific additions and overrides. See local/README for details.
include if exists <local/samba-rpcd>
}
Reference in a new issue Copy permalink