
On 2022-11-04 14:08, Christian Boltz wrote:
Hello,
Am Freitag, 4. November 2022, 01:12:24 CET schrieb Joe Salmeri:
Today I updated from TW 20220908 to 20221101 and SMB no longer works [...] I believe the problem is related to apparmour changes for samba but I am unsure how to resolve the issue.
Check your /var/log/audit/audit.log for lines containing DENIED. If AppArmor really denies something, you'll have such lines.
Unrelated, but this post reminded me that I had an issue with samba and AA in Leap 15.3, which I have been ignoring, till today; aa-logprof just added these lines: --- /etc/apparmor.d/usr.sbin.smbd 2022-04-15 20:39:33.840172862 +0200 +++ /tmp/tmpyx87k_w0 2022-11-05 18:54:20.666807500 +0100 @@ -1,4 +1,4 @@ -# Last Modified: Fri Apr 15 20:39:33 2022 +# Last Modified: Sat Nov 5 18:54:20 2022 #include <tunables/global> profile smbd /usr/{bin,sbin}/smbd { @@ -58,5 +58,7 @@ profile smbd /usr/{bin,sbin}/smbd { @{HOMEDIRS}/** rwlk, @{PROC}/@{pid}/mounts r, @{PROC}/sys/kernel/core_pattern r, + owner /proc/*/fd/ r, + owner /{,var/}run/samba/** rwk, } Just saying in case it helps. The errors were: Profile: smbd Path: /proc/2524/fd/ New Mode: owner r Severity: 6 [1 - owner /proc/*/fd/ r,] 2 - owner /proc/2524/fd/ r, (A)llow / [(D)eny] / (I)gnore / (G)lob / Glob with (E)xtension / (N)ew / Audi(t) / (O)wner permissions off / Abo(r)t / (F)inish Profile: smbd Path: /run/samba/samba-bgqd.pid Old Mode: rk New Mode: owner rwk Severity: unknown [1 - owner /{,var/}run/samba/** rwk,] 2 - owner /run/samba/samba-bgqd.pid rwk, (A)llow / [(D)eny] / (I)gnore / (G)lob / Glob with (E)xtension / (N)ew / Audi(t) / (O)wner permissions off / Abo(r)t / (F)inish Adding owner /{,var/}run/samba/** rwk, to profile. -- Cheers / Saludos, Carlos E. R. (from 15.3 x86_64 at Telcontar)