mirrors/apparmor
1
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor.git synced 2025-03-04 08:24:42 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

add kerberosclient to included abstractions for winbindd

Browse source 
prevent messages like

apparmor="DENIED" operation="file_mmap" profile="/usr/sbin/winbindd" name="/usr/lib64/krb5/plugins/authdata/sssd_pac_plugin.so" pid=2798 comm="winbindd" requested_mask="m" denied_mask="m" fsuid=52311 ouid=0

Signed-off-by: Noel Power <noel.power@suse.com>
This commit is contained in:
Noel Power 2023-03-03 11:44:45 +00:00
parent 6e94794c68
commit 0593a035f5
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
profiles/apparmor.d/usr.sbin.winbindd
View file

@ -6,6 +6,7 @@ profile winbindd /usr/{bin,sbin}/winbindd {
include <abstractions/base> include <abstractions/base>
include <abstractions/nameservice> include <abstractions/nameservice>
include <abstractions/samba> include <abstractions/samba>
include <abstractions/kerberosclient>
deny capability block_suspend, deny capability block_suspend,