[Bug 1225811] [Build 20240531] samba 4.20.1 gives DENIED in audit.log
![](https://seccdn.libravatar.org/avatar/a895f78a81a109471893519443e4d933.jpg?s=120&d=mm&r=g)
https://bugzilla.suse.com/show_bug.cgi?id=1225811
https://bugzilla.suse.com/show_bug.cgi?id=1225811#c4
--- Comment #4 from Noel Power
Created attachment 875353 [details] patchj to squash apparmor errors
the only log entry I got was similar to the one already mentioned in comment #0 grep witness apparmor-witness/audit.log type=AVC msg=audit(1717665586.168:324): apparmor="DENIED" operation="exec" class="file" profile="samba-dcerpcd" name="/usr/lib64/samba/rpcd_witness" pid=8516 comm="samba-dcerpcd" requested_mask="x" denied_mask="x" fsuid=0 ouid=0 and I invoked all of the rpc methods the new rpcd_witness service provides (with no extra DENIES observed) I *think* the change attached is all that is required (there didn't seem to be any need to add 'witness' to any of the existing entries in the 'common' samba-rpcd profile) but maybe for completeness we should ? I did have changes here but on the second run (after a reboot) I didn't seem to need them (but that might be some cache issue) I will attach the full set of modifications here also -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@suse.com