[Bug 679182] New: Appamor configuration file for nmbd seems to be wrong SUSE 11.4
https://bugzilla.novell.com/show_bug.cgi?id=679182 https://bugzilla.novell.com/show_bug.cgi?id=679182#c0 Summary: Appamor configuration file for nmbd seems to be wrong SUSE 11.4 Classification: openSUSE Product: openSUSE 11.4 Version: Final Platform: x86-64 OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: AppArmor AssignedTo: jeffm@novell.com ReportedBy: matthew@ssl.co.uk QAContact: qa@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-GB; rv:1.9.2.13) Gecko/20101203 SUSE/3.6.13-0.2.1 Firefox/3.6.13 The stated location of /var/lib/samba/browse.dat is incorrect in the installed apparmor configuration file. This causes lots of log output. Reproducible: Always Steps to Reproduce: 1. 2. 3. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=679182
https://bugzilla.novell.com/show_bug.cgi?id=679182#c1
Michal Kubeček
https://bugzilla.novell.com/show_bug.cgi?id=679182
https://bugzilla.novell.com/show_bug.cgi?id=679182#c2
Jeff Mahoney
https://bugzilla.novell.com/show_bug.cgi?id=679182
https://bugzilla.novell.com/show_bug.cgi?id=679182#c3
--- Comment #3 from Matthew Carey
I've added the files and dirs to the profiles. Test packages should appear at http://download.opensuse.org/repositories/home:/jeff_mahoney:/branches:/open... shortly.
Please test and report back.
I set the above as my repository for apparmor and replace the version of apparmor to the one on that site. I also deleted the current apparmor nmbd profile file so that the one from the repository was definitely used. I have stopped and restarted apparmor cd /etc/init.d sudo boot.apparmor stop sudo boot.apparmor start I do not get the messages in /var/log/messages and samba seems to now work, I can get to the machine from konquerer with the smb:// url on a linux box and from a couple of windows boxes though admittedly I don't have a very sophisticated samba configuration. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=679182
https://bugzilla.novell.com/show_bug.cgi?id=679182#c
Christian Boltz
https://bugzilla.novell.com/show_bug.cgi?id=679182
https://bugzilla.novell.com/show_bug.cgi?id=679182#c4
alexis Pellicier
https://bugzilla.novell.com/show_bug.cgi?id=679182
https://bugzilla.novell.com/show_bug.cgi?id=679182#c5
Tamás Németh
https://bugzilla.novell.com/show_bug.cgi?id=679182
https://bugzilla.novell.com/show_bug.cgi?id=679182#c
Tamás Németh
https://bugzilla.novell.com/show_bug.cgi?id=679182
https://bugzilla.novell.com/show_bug.cgi?id=679182#c6
Christian Boltz
It still doesnt't work for me on a freshly installed 11.4 final.
Did you install the test packages from the repo mentioned in comment #2 ? (AFAIK they are not in the "official" update repo yet.) If you did and still see problems, please run aa-complain /usr/sbin/nmbd to switch the profile in learning mode. Then restart AppArmor, restart nmbd and use it for some hours. Afterwards, please attach your /var/log/audit/audit.log to this bugreport. If you want to update your profile yourself, run aa-logprof And don't forget to switch the profile to enforce mode again with aa-enforce /usr/sbin/nmbd
I had to disable apparmor in order to be able to use nmbd.
Well, switching the problematic/too strict profile to learning (complain) mode with aa-complain would be enough. (But you are not the only one who completely disables apparmor - which still doesn't make this a good idea IMHO.) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=679182
https://bugzilla.novell.com/show_bug.cgi?id=679182#c7
--- Comment #7 from Tamás Németh
https://bugzilla.novell.com/show_bug.cgi?id=679182
https://bugzilla.novell.com/show_bug.cgi?id=679182#c8
Andrew Beames
https://bugzilla.novell.com/show_bug.cgi?id=679182
https://bugzilla.novell.com/show_bug.cgi?id=679182#c9
--- Comment #9 from Bernhard Wiedemann
https://bugzilla.novell.com/show_bug.cgi?id=679182
https://bugzilla.novell.com/show_bug.cgi?id=679182#c10
Marcel KÜhlhorn
https://bugzilla.novell.com/show_bug.cgi?id=679182
https://bugzilla.novell.com/show_bug.cgi?id=679182#c11
--- Comment #11 from Bernhard Wiedemann
https://bugzilla.novell.com/show_bug.cgi?id=679182
https://bugzilla.novell.com/show_bug.cgi?id=679182#c12
--- Comment #12 from Bernhard Wiedemann
https://bugzilla.novell.com/show_bug.cgi?id=679182
https://bugzilla.novell.com/show_bug.cgi?id=679182#c13
Swamp Workflow Management
https://bugzilla.novell.com/show_bug.cgi?id=679182
https://bugzilla.novell.com/show_bug.cgi?id=679182#c14
Swamp Workflow Management
https://bugzilla.novell.com/show_bug.cgi?id=679182
https://bugzilla.novell.com/show_bug.cgi?id=679182#c
Swamp Workflow Management
https://bugzilla.novell.com/show_bug.cgi?id=679182
https://bugzilla.novell.com/show_bug.cgi?id=679182#c15
--- Comment #15 from Christian Boltz
openSUSE 11.4. I was getting nmbd errors.
I edited: /etc/apparmor.d/usr.sbin.nmbd
I replaced line: /var/cache/samba/browse.dat* rw,
with /var/lib/samba/browse.dat* rw,
and after a restart there were no more errors.
Good catch - looks like the path has changed from /var/cache/samba to /var/lib/samba. I just sent a patch upstream for review. That said: your issue would nearly have been lost in this bugreport. Opening a new bugreport is usually the better way ;-) (In reply to comment #7)
Sorry, I suffered a knee injury and don't have access to active directory for a few weeks. I will probably try it afterwards.
I hope your knee is better again ;-) Did you have a chance to test the updated profile? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=679182
https://bugzilla.novell.com/show_bug.cgi?id=679182#c16
Christian Boltz
https://bugzilla.novell.com/show_bug.cgi?id=679182
https://bugzilla.novell.com/show_bug.cgi?id=679182#c17
Christian Boltz
https://bugzilla.novell.com/show_bug.cgi?id=679182
https://bugzilla.novell.com/show_bug.cgi?id=679182#c18
--- Comment #18 from Bernhard Wiedemann
participants (1)
-
bugzilla_noreply@novell.com