On 2022-02-02 13:02, Wilfred van Velzen wrote:
I don't really need it because I don't need printing through samba, but I'm curious, so I tried it:
# aa-logprof Reading log entries from /var/log/audit/audit.log. Updating AppArmor profiles in /etc/apparmor.d. Target profile exists: /etc/apparmor.d/samba-bgqd
Profile: smbd Execute: /usr/lib64/samba/samba-bgqd Severity: unknown
(I)nherit / (C)hild / (P)rofile / (N)amed / (U)nconfined / (X) ix On / (D)eny / Abo(r)t / (F)inish
I have no clue what to choose here.
I think "inherit". It may ask you further questions. And you should create a bugzilla about the issue, with the changes you had to do, so that an update with those changes as appropriate is made.
And there seems to be a big discrepancy with 'man aa-logprof' because it only mentions and explains these options:
(A)llow, (D)eny, (I)gnore, (N)ew, (G)lob last piece, (Q)uit
???
Yeah, well... -- Cheers / Saludos, Carlos E. R. (from 15.3 x86_64 at Telcontar)