Comment # 2 on bug 945563 from Christian Boltz

Please edit /etc/apparmor.d/usr.sbin.smbd and /etc/apparmor.d/usr.sbin.nmbd and
add the following lines to both of them (inside the { ...} section):

  /etc/samba/sock/ rw,
  /etc/samba/sock/* w,

That should cover all samba-related events in your audit.log.


Lars, does winbindd also need those permissions? (I wonder if I should add them
to abstractions/samba instead of the individual profiles.)