On 2022-11-04 14:08, Christian Boltz wrote:
Hello,
Am Freitag, 4. November 2022, 01:12:24 CET schrieb Joe Salmeri:
Today I updated from TW 20220908 to 20221101 and SMB no longer works
[...]
I believe the problem is related to apparmour changes for samba but I
am unsure how to resolve the issue.
Check your /var/log/audit/audit.log for lines containing DENIED.
If AppArmor really denies something, you'll have such lines.
Unrelated, but this post reminded me that I had an issue with samba and
AA in Leap 15.3, which I have been ignoring, till today; aa-logprof just
added these lines:
--- /etc/apparmor.d/usr.sbin.smbd 2022-04-15 20:39:33.840172862 +0200
+++ /tmp/tmpyx87k_w0 2022-11-05 18:54:20.666807500 +0100
@@ -1,4 +1,4 @@
-# Last Modified: Fri Apr 15 20:39:33 2022
+# Last Modified: Sat Nov 5 18:54:20 2022
#include
profile smbd /usr/{bin,sbin}/smbd {
@@ -58,5 +58,7 @@ profile smbd /usr/{bin,sbin}/smbd {
@{HOMEDIRS}/** rwlk,
@{PROC}/@{pid}/mounts r,
@{PROC}/sys/kernel/core_pattern r,
+ owner /proc/*/fd/ r,
+ owner /{,var/}run/samba/** rwk,
}
Just saying in case it helps.
The errors were:
Profile: smbd
Path: /proc/2524/fd/
New Mode: owner r
Severity: 6
[1 - owner /proc/*/fd/ r,]
2 - owner /proc/2524/fd/ r,
(A)llow / [(D)eny] / (I)gnore / (G)lob / Glob with (E)xtension / (N)ew /
Audi(t) / (O)wner permissions off / Abo(r)t / (F)inish
Profile: smbd
Path: /run/samba/samba-bgqd.pid
Old Mode: rk
New Mode: owner rwk
Severity: unknown
[1 - owner /{,var/}run/samba/** rwk,]
2 - owner /run/samba/samba-bgqd.pid rwk,
(A)llow / [(D)eny] / (I)gnore / (G)lob / Glob with (E)xtension / (N)ew /
Audi(t) / (O)wner permissions off / Abo(r)t / (F)inish
Adding owner /{,var/}run/samba/** rwk, to profile.
--
Cheers / Saludos,
Carlos E. R.
(from 15.3 x86_64 at Telcontar)