mirrors/apparmor
1
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor.git synced 2025-03-04 08:24:42 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

profiles/apparmor.d: update samba-dceprpc & samba-rpcd-* profiles

Browse source 
aarch64 needs some additional rules on tumbleweed to handle for
example

apparmor="DENIED" operation="file_mmap" profile="samba-dcerpcd" name="/usr/lib64/samba/samba-dcerpcd" pid=897 comm="samba-dcerpcd" requested_mask="m" denied_mask="

The other new rpcd_* services exhibit similar errors

Fixes: https://bugzilla.opensuse.org/show_bug.cgi?id=1198309

Signed-off-by: Noel Power <noel.power@suse.com>
This commit is contained in:
Noel Power 2022-05-11 15:55:01 +01:00
parent 62bf2f773b
commit 6a621616d9
4 changed files with 6 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
profiles/apparmor.d/samba-dcerpcd
View file

@ -18,6 +18,8 @@ profile samba-dcerpcd /usr/lib*/samba/samba-dcerpcd {
@{run}/samba/samba-dcerpcd.pid wk, @{run}/samba/samba-dcerpcd.pid wk,
/usr/lib*/samba/samba-dcerpcd m,
/usr/lib*/samba/rpcd_{mdssvc,epmapper,rpcecho,fsrvp,lsad,winreg} Px -> samba-rpcd, /usr/lib*/samba/rpcd_{mdssvc,epmapper,rpcecho,fsrvp,lsad,winreg} Px -> samba-rpcd,
/usr/lib*/samba/rpcd_classic Px -> samba-rpcd-classic, /usr/lib*/samba/rpcd_classic Px -> samba-rpcd-classic,
/usr/lib*/samba/rpcd_spoolss Px -> samba-rpcd-spoolss, /usr/lib*/samba/rpcd_spoolss Px -> samba-rpcd-spoolss,

1
profiles/apparmor.d/samba-rpcd
View file

@ -15,6 +15,7 @@ include <tunables/global>
profile samba-rpcd /usr/lib*/samba/rpcd_{mdssvc,epmapper,rpcecho,fsrvp,lsad,winreg} { profile samba-rpcd /usr/lib*/samba/rpcd_{mdssvc,epmapper,rpcecho,fsrvp,lsad,winreg} {
include <abstractions/samba-rpcd> include <abstractions/samba-rpcd>
/usr/lib*/samba/rpcd_{mdssvc,epmapper,rpcecho,fsrvp,lsad,winreg} m,
# Site-specific additions and overrides. See local/README for details. # Site-specific additions and overrides. See local/README for details.
include if exists <local/samba-rpcd> include if exists <local/samba-rpcd>
} }

2
profiles/apparmor.d/samba-rpcd-classic
View file

@ -17,6 +17,8 @@ profile samba-rpcd-classic /usr/lib*/samba/rpcd_classic {
include <abstractions/samba-rpcd> include <abstractions/samba-rpcd>
include <abstractions/wutmp> include <abstractions/wutmp>
/usr/lib*/samba/rpcd_classic m,
# Site-specific additions and overrides. See local/README for details. # Site-specific additions and overrides. See local/README for details.
include if exists <local/samba-rpcd-classic> include if exists <local/samba-rpcd-classic>
} }

1
profiles/apparmor.d/samba-rpcd-spoolss
View file

@ -16,6 +16,7 @@ include <tunables/global>
profile samba-rpcd-spoolss /usr/lib*/samba/rpcd_spoolss { profile samba-rpcd-spoolss /usr/lib*/samba/rpcd_spoolss {
include <abstractions/samba-rpcd> include <abstractions/samba-rpcd>
/usr/lib*/samba/rpcd_spoolss m,
/usr/lib*/samba/samba-bgqd Px -> samba-bgqd, /usr/lib*/samba/samba-bgqd Px -> samba-bgqd,
# Site-specific additions and overrides. See local/README for details. # Site-specific additions and overrides. See local/README for details.