https://bugzilla.novell.com/show_bug.cgi?id=738041
https://bugzilla.novell.com/show_bug.cgi?id=738041#c9
Christian Boltz changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |NEEDINFO
InfoProvider| |pellice@yahoo.fr
--- Comment #9 from Christian Boltz 2012-01-03 00:32:59 CET ---
(In reply to comment #8)
Sorry for the delay I was on holidays. Happy new year :-)
Happy new year :-)
The oly change in smbd profile:
/usr/sbin/smbldap-useradd Px,
Looks good.
Your profile for smbldap-useradd used some "interesting" abstractions (for
example apache2-common, which doesn't really have something to do with samba
;-) Therefore I decided to create the profile myself based on your logs. I
also split off the /etc/init.d/nscd call into a child profile. The result:
# Last Modified: Tue Jan 3 00:17:40 2012
#include
/usr/sbin/smbldap-useradd {
#include
#include
#include
#include
/dev/tty rw,
/etc/init.d/nscd Cx,
/etc/shadow r,
/etc/smbldap-tools/smbldap.conf r,
/etc/smbldap-tools/smbldap_bind.conf r,
/usr/sbin/smbldap-useradd r,
/usr/sbin/smbldap_tools.pm r,
/var/log/samba/log.smbd w,
profile /etc/init.d/nscd {
#include
#include
capability sys_ptrace,
/bin/bash r,
/bin/mountpoint rix,
/bin/systemctl rix,
/dev/tty rw,
/etc/init.d/nscd r,
/etc/rc.status r,
/proc/filesystems r,
/proc/meminfo r,
}
}
Can you please test if this profile works for you?
(Just for the records, if someone finds this bugreport one day: smbldap-useradd
is part of the smbldap-tools package, which is currently only in spins:invis.)
--
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.