apparmor/profiles/apparmor.d/usr.sbin.nmbd
2018-07-25 14:07:35 -07:00

30 lines
812 B
Text

#include <tunables/global>
/usr/{bin,sbin}/nmbd {
#include <abstractions/base>
#include <abstractions/nameservice>
#include <abstractions/samba>
capability net_bind_service,
@{PROC}/sys/kernel/core_pattern r,
/usr/{bin,sbin}/nmbd mr,
/var/cache/samba/gencache.tdb rwk,
/var/{cache,lib}/samba/browse.dat* rw,
/var/{cache,lib}/samba/gencache.dat rw,
/var/{cache,lib}/samba/wins.dat* rw,
/var/{cache,lib}/samba/smb_krb5/ rw,
/var/{cache,lib}/samba/smb_krb5/krb5.conf* rw,
/var/{cache,lib}/samba/smb_tmp_krb5.* rw,
/var/{cache,lib}/samba/sync.* rw,
/var/{cache,lib}/samba/unexpected rw,
/var/cache/samba/msg/ rw,
/var/cache/samba/msg/* w,
/{,var/}run/samba/** rwk,
# Site-specific additions and overrides. See local/README for details.
#include <local/usr.sbin.nmbd>
}