https://bugzilla.novell.com/show_bug.cgi?id=725967 https://bugzilla.novell.com/show_bug.cgi?id=725967#c0 Summary: AppArmor doesn't allow Samba VFS modules (recyclebin etc.) Classification: openSUSE Product: openSUSE 12.1 Version: Factory Platform: Other OS/Version: Other Status: NEEDINFO Severity: Normal Priority: P5 - None Component: AppArmor AssignedTo: suse-beta@cboltz.de ReportedBy: suse-beta@cboltz.de QAContact: qa@suse.de InfoProvider: lmuelle@suse.com Found By: Beta-Customer Blocker: --- Found by Tao te Puh in the opensuse-de ML: AppArmor doesn't allow Samba to load VFS modules, for example the recycle module. Those modules are described on http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/VFS.html audit.log contains: type=AVC msg=audit(1319301247.814:209): apparmor="DENIED" operation="file_mmap" parent=13681 profile="/usr/sbin/smbd" name="/usr/lib/samba/vfs/recycle.so" pid=13744 comm="smbd" requested_mask="m" denied_mask="m" fsuid=0 ouid=0 There are more *.so modules in this directory, and it's /usr/lib64/samba/vfs/ in the 64bit version, so we need at least this rule in the usr.sbin.smbd profile: /usr/lib*/samba/vfs/*.so mr, @Lars: what about the other files in /usr/lib*/samba/? There are several *.so in the other subdirectories, and some *.msg and *.dat in /usr/lib*/samba/, but /usr/lib*/samba is not mentioned in the samba profiles. Which of those files are loaded by a) smbd b) nmbd c) winbindd ? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.