4 commits

Author	SHA1	Message	Date
Spyros Seimenis	96aff5a5c5	profiles/apparmor.d: Update samba profile ... Fixes: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1990692 Signed-off-by: Spyros Seimenis <spyros.seimenis@canonical.com>	2022-09-29 16:02:20 +03:00
nl6720	deadcc0d11	samba profiles: support paths used by Arch Linux ... On Arch Linux rpcd_classic, rpcd_epmapper, rpcd_fsrvp, rpcd_lsad, rpcd_mdssvc, rpcd_rpcecho, rpcd_spoolss, rpcd_winreg, samba-bgqd, samba-dcerpcd and smbspool_krb5_wrapper are in /usr/lib/samba/samba/. See https://archlinux.org/packages/extra/x86_64/samba/files/ and https://bugs.archlinux.org/task/74614.	2022-06-06 11:57:14 +03:00
Noel Power	6a621616d9	profiles/apparmor.d: update samba-dceprpc & samba-rpcd-* profiles ... aarch64 needs some additional rules on tumbleweed to handle for example apparmor="DENIED" operation="file_mmap" profile="samba-dcerpcd" name="/usr/lib64/samba/samba-dcerpcd" pid=897 comm="samba-dcerpcd" requested_mask="m" denied_mask=" The other new rpcd_* services exhibit similar errors Fixes: https://bugzilla.opensuse.org/show_bug.cgi?id=1198309 Signed-off-by: Noel Power <noel.power@suse.com>	2022-05-11 15:55:01 +01:00
Noel Power	c785bcbe47	profiles/apparmor.d: Add new profiles needed for samba-4.16 ... samba-4.16 has a completely new dcerpc subsystem, services that used to be built into the smbd daemon itself (and deployed in forked instances) are now hosted in standalone binaries. The following new binaries now need new profiles rpcd_classic rpcd_epmapper rpcd_fsrvp rpcd_lsad rpcd_mdssvc rpcd_rpcecho rpcd_spoolss rpcd_winreg samba-dcerpcd Mostly these are captured in a single common profile 'samba-rpcd' Additionally smbd & winbindd need new entries because they exec samba-dcerpcd Fixes: https://bugzilla.opensuse.org/show_bug.cgi?id=1198309 Signed-off-by: Noel Power <noel.power@suse.com>	2022-04-15 12:10:07 +01:00