John Johansen 6f856dfee3 Merge profiles/samba*: allow /etc/gnutls/config & @{HOMEDIRS} ... # abstractions/samba: allow /etc/gnutls/config Various samba components want to read it. Without it, shares cannot be accessed. apparmor="DENIED" operation="open" class="file" profile="nmbd" name="/etc/gnutls/config" pid=23509 comm="nmbd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 apparmor="DENIED" operation="open" class="file" profile="smbd" name="/etc/gnutls/config" pid=23508 comm="smbd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 apparmor="DENIED" operation="open" class="file" profile="samba-rpcd" name="/etc/gnutls/config" pid=24037 comm="rpcd_fsrvp" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 apparmor="DENIED" operation="open" class="file" profile="samba-rpcd" name="/etc/gnutls/config" pid=24036 comm="rpcd_epmapper" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 apparmor="DENIED" operation="open" class="file" profile="samba-rpcd" name="/etc/gnutls/config" pid=24038 comm="rpcd_lsad" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 apparmor="DENIED" operation="open" class="file" profile="samba-rpcd" name="/etc/gnutls/config" pid=24041 comm="rpcd_winreg" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 apparmor="DENIED" operation="open" class="file" profile="samba-rpcd" name="/etc/gnutls/config" pid=24039 comm="rpcd_mdssvc" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 apparmor="DENIED" operation="open" class="file" profile="samba-rpcd-spoolss" name="/etc/gnutls/config" pid=24040 comm="rpcd_spoolss" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 apparmor="DENIED" operation="open" class="file" profile="samba-rpcd-classic" name="/etc/gnutls/config" pid=24035 comm="rpcd_classic" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 # profiles/apparmor.d/samba-rpcd-classic: allow @{HOMEDIRS} Give access to @{HOMEDIRS}, just like in usr.sbin.smbd, so that usershares in /home/ can be accessed. apparmor="DENIED" operation="open" class="file" profile="samba-rpcd-classic" name="/home/user/path/to/usershare/" pid=4781 comm="rpcd_classic" requested_mask="r" denied_mask="r" fsuid=0 ouid=1000 Fixes: https://gitlab.com/apparmor/apparmor/-/issues/379 MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/1200 Approved-by: John Johansen <john@jjmx.net> Merged-by: John Johansen <john@jjmx.net> (cherry picked from commit 5998a0021a) Signed-off-by: John Johansen <john.johansen@canonical.com>		2024-04-03 14:15:52 -07:00
..
apparmor/profiles/extras	Merge usr.sbin.sshd: Add new permissions needed on Ubuntu 24.04	2024-04-03 02:29:31 -07:00
apparmor.d	Merge profiles/samba*: allow /etc/gnutls/config & @{HOMEDIRS}	2024-04-03 14:15:52 -07:00
Makefile	Don't create local/* profile sniplets by default	2023-08-20 11:49:10 +02:00