https://bugzilla.novell.com/show_bug.cgi?id=758426
https://bugzilla.novell.com/show_bug.cgi?id=758426#c11
Christian Boltz changed:
What |Removed |Added
----------------------------------------------------------------------------
InfoProvider|suse-beta@cboltz.de |roberto.bernetti@poste.it
--- Comment #11 from Christian Boltz 2012-04-23 13:45:18 CEST ---
According to the audit.log, we need (at least) the following changes to the
smbd profile:
+ capability fowner,
+ capability lease,
+ /proc/sys/kernel/core_pattern r,
@Lars: Needless to say that those were included in my proposal from bug 757545
comment 3 ;-)
The audit.log also requests
+ /home/ r,
which is probably caused by this config section:
[users]
comment = All users
path = /home
@Lars: Is this part of the default smb.conf or something Roberto added?
Depending on the answer, we'll have to add the "/home/ r," line to the profile.
(BTW: "/home/ r," is not even in the latest upstream profile.)
@Roberto:
The last lines in audit.log indicate that AppArmor was stopped, so we might
need more changes.
Please add the following lines to /etc/apparmor.d/usr.sbin.smbd (inside the {
... } block):
capability fowner,
capability lease,
/proc/sys/kernel/core_pattern r,
Then run the following commands:
echo "using the updated smbd profile" >> /var/log/audit/audit.log
rcapparmor reload
rcsmb reload
Then use Samba for a while and attach your audit.log again.
--
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.