John Johansen b83cf90b82 Merge Fix some DENIES for smbd when honouring pam restrictions ... with smbd.conf param 'obey pam restrictions = yes' on tumbleweed we get some new DENIES (which can prevent login) e.g. type=AVC msg=audit(1709113104.674:533): apparmor="DENIED" operation="exec" class="file" profile="smbd" name="/usr/sbin/unix_chkpwd" pid=3509 comm="smbd[127.0.0.1]" requested_mask="x" denied_mask="x" fsuid=0 ouid=0 type=AVC msg=audit(1709110904.602:345): apparmor="DENIED" operation="open" class="file" profile="smbd" name="/usr/etc/security/limits.d/" pid=3746 comm="smbd[127.0.0.1]" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 type=AVC msg=audit(1709110904.602:346): apparmor="DENIED" operation="open" class="file" profile="smbd" name="/proc/3746/loginuid" pid=3746 comm="smbd[127.0.0.1]" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 type=AVC msg=audit(1709110904.602:347): apparmor="DENIED" operation="open" class="file" profile="smbd" name="/usr/etc/environment" pid=3746 comm="smbd[127.0.0.1]" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 Fixes: https://bugzilla.opensuse.org/show_bug.cgi?id=1220032 Signed-off-by: Noel Power <noel.power@suse.com> MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/1159 Approved-by: John Johansen <john@jjmx.net> Merged-by: John Johansen <john@jjmx.net>		2024-02-29 18:00:40 +00:00
..
apparmor/profiles/extras	firefox: remove owner restrictions for /proc/$pid/net/*	2023-12-24 17:19:10 +01:00
apparmor.d	Merge Fix some DENIES for smbd when honouring pam restrictions	2024-02-29 18:00:40 +00:00
Makefile	Don't create local/* profile sniplets by default	2023-08-20 11:49:10 +02:00