http://bugzilla.opensuse.org/show_bug.cgi?id=1198309 http://bugzilla.opensuse.org/show_bug.cgi?id=1198309#c34 Felix Niederwanger <felix.niederwanger@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Resolution|FIXED |--- --- Comment #34 from Felix Niederwanger <felix.niederwanger@suse.com> --- The apparmor part of this issue is still present on Tumbleweed aarch64, as the openQA test runs show: https://openqa.opensuse.org/tests/2338306#step/cifs/51 The issue there is, that with active apparmor the listing of shares using `smbclient` returns only an empty list:

tw-aarch64:~ # systemctl is-active apparmor active tw-aarch64:~ # smbclient -m SMB2 -L currywurst -I 127.0.0.1 -U guest -N

Sharename Type Comment --------- ---- ------- SMB1 disabled -- no workgroup available

Here we expect at least two shares to pop up, as they are configured in `/etc/samba/smb.conf`:

[currywurst] path = /srv/samba/currywurst read only = yes browseable = yes guest ok = yes

[filedrop] path = /srv/samba/filedrop browseable = no write list = geekotest create mask = 0644 directory mask = 0755

The issue is only present on Tumbleweed aarch64 and only with enabled apparmor. I could not reproduce the issue on Tumbleweed x86_64 using the exact same procedure. On aarch64 disabling apparmor and rebooting resolves the issue and `smbclient` then lists all existing shares nicely:

tw-x86_64:~ # systemctl is-active apparmor active tw-x86_64:~ # smbclient -m SMB2 -L currywurst -I 127.0.0.1 -U guest -N

Sharename Type Comment --------- ---- ------- profiles Disk Network Profiles Service users Disk All users groups Disk All groups print$ Disk Printer Drivers currywurst Disk IPC$ IPC IPC Service (Samba 4.16.1-git.235.f435da606f71.1-SUSE-oS15.9-aarch64) SMB1 disabled -- no workgroup available

tw-aarch64:~ # systemctl is-active apparmor inactive tw-aarch64:~ # smbclient -m SMB2 -L currywurst -I 127.0.0.1 -U guest -N

Sharename Type Comment --------- ---- ------- profiles Disk Network Profiles Service users Disk All users groups Disk All groups print$ Disk Printer Drivers currywurst Disk IPC$ IPC IPC Service (Samba 4.16.1-git.235.f435da606f71.1-SUSE-oS15.9-aarch64) SMB1 disabled -- no workgroup available

## Reproducer This issue is only present on aarch64 but not on x86_64. I could reproduce it in a fresh Tumbleweed VM there using the following:

zypper in samba useradd geekotest mkdir -p /srv/samba/{currywurst,filedrop} echo -e '[currywurst]\npath = /srv/samba/currywurst\nread only = yes\nbrowseable = yes\nguest ok = yes\n\n' >> /etc/samba/smb.conf echo -e '[filedrop]\npath = /srv/samba/filedrop\nbrowseable = no\nwrite list = geekotest\ncreate mask = 0644\ndirectory mask = 0755\n' >> /etc/samba/smb.conf chown -R geekotest /srv/samba/{currywurst,filedrop} chmod -R 0755 /srv/samba/currywurst chmod -R 0750 /srv/samba/filedrop systemctl start smb echo -ne 'nots3cr3t\nnots3cr3t' | smbpasswd -a -s geekotest smbclient -m SMB2 -L currywurst -I 127.0.0.1 -U guest -N

The expected output is to show at least the "currywurst" share here. -- You are receiving this mail because: You are on the CC list for the bug.