apparmor/profiles/apparmor.d
Christian Boltz 9b5ff659b0 Update Samba profiles for Samba 4.2
Samba 4.2 needs some more permissions for nmbd and winbindd.

To avoid overcomplicated profiles, change abstractions/samba to allow
/var/lib/samba/** rwk, (instead of **.tdb rwk) - this change already
fixes the nmbd profile.

winbindd additionally needs some more write permissions in /etc/samba/
(and also in /var/lib/samba/, which is covered by the abstractions/samba
change and also results in some profile cleanup)


References: https://bugzilla.opensuse.org/show_bug.cgi?id=921098 and
            https://bugzilla.opensuse.org/show_bug.cgi?id=923201


Acked-by: Seth Arnold <seth.arnold@canonical.com>
2015-05-19 01:25:26 +02:00
..
abstractions Update Samba profiles for Samba 4.2 2015-05-19 01:25:26 +02:00
apache2.d Miscellaneous updates for phpsysinfo on Ubuntu 14.10 2014-09-08 20:42:50 -05:00
local exported smbd files need to have 'k' to work properly with certain applications 2010-09-14 14:12:49 -05:00
tunables = Background = 2014-02-14 16:24:52 -06:00
bin.ping /bin/ping moved to /usr/bin/ping on openSUSE (usrMerge) 2012-08-10 00:51:40 +02:00
sbin.klogd klogd, syslog-ng and syslogd moved from /sbin/ to /usr/sbin/ on openSUSE. 2015-03-07 21:16:11 +01:00
sbin.syslog-ng klogd, syslog-ng and syslogd moved from /sbin/ to /usr/sbin/ on openSUSE. 2015-03-07 21:16:11 +01:00
sbin.syslogd klogd, syslog-ng and syslogd moved from /sbin/ to /usr/sbin/ on openSUSE. 2015-03-07 21:16:11 +01:00
usr.lib.apache2.mpm-prefork.apache2 start on 'local/' mechanism to aid in packaging: 2010-08-05 14:00:02 -05:00
usr.lib.dovecot.anvil profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.auth dovecot auth needs to read openssl.cnf 2015-03-19 13:56:41 +01:00
usr.lib.dovecot.config profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.deliver profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.dict profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.dovecot-auth profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.dovecot-lda profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.imap Add some missing /run/dovecot/* to usr.lib.dovecot.imap{, -login} 2014-12-22 17:41:59 +01:00
usr.lib.dovecot.imap-login Add some missing /run/dovecot/* to usr.lib.dovecot.imap{, -login} 2014-12-22 17:41:59 +01:00
usr.lib.dovecot.lmtp usr.lib.dovecot.lmtp: add openssl and ssl_keys abstractions 2015-04-27 21:33:06 +02:00
usr.lib.dovecot.log profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.managesieve dovecot profile update 2014-07-07 23:35:18 +02:00
usr.lib.dovecot.managesieve-login dovecot profile update 2014-07-07 23:35:18 +02:00
usr.lib.dovecot.pop3 profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.pop3-login profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.lib.dovecot.ssl-params profiles: add dovecot-common abstraction 2014-06-27 12:14:53 -07:00
usr.sbin.apache2 Update phpsysinfo instructions in usr.sbin.apache2. Incorporate feedback from 2014-09-08 20:39:34 -05:00
usr.sbin.avahi-daemon update avahi-daemon for fine-grained netlink mediation 2014-09-03 14:16:32 -05:00
usr.sbin.dnsmasq usr.sbin.dnsmasq: add lxc-net paths 2015-03-29 20:49:09 -07:00
usr.sbin.dovecot update and cleanup usr.sbin.dovecot profile 2014-12-22 17:49:28 +01:00
usr.sbin.identd identd pid file location on Debian/Ubuntu 2014-09-03 14:47:33 -05:00
usr.sbin.mdnsd mdnsd update for fine-grained netlink mediation 2014-09-03 14:49:50 -05:00
usr.sbin.nmbd Update samba profiles for samba 4.x 2013-11-20 01:17:52 +01:00
usr.sbin.nscd cleanup nscd profile 2014-12-01 23:44:13 +01:00
usr.sbin.ntpd Add the attach_disconnected flag to the ntpd profile 2015-05-19 01:20:49 +02:00
usr.sbin.smbd cleanup smbd profiles 2015-02-28 21:35:18 +01:00
usr.sbin.smbldap-useradd when using smbldap-useradd using this smb.conf entry 2012-01-10 19:06:24 +01:00
usr.sbin.traceroute /usr/sbin/traceroute6 is a symlink to /usr/sbin/traceroute. 2011-11-30 13:15:21 +01:00
usr.sbin.winbindd Update Samba profiles for Samba 4.2 2015-05-19 01:25:26 +02:00