http://bugzilla.opensuse.org/show_bug.cgi?id=921098
http://bugzilla.opensuse.org/show_bug.cgi?id=921098#c17
Christian Boltz
unfortunately tumbleweed and latest SLE12-sp1(alpha2) share similar problems, seems we missed some things in the profiles still
see proposed fix in attachment mentioned in comment #15
+++ old/usr.sbin.nmbd 2015-07-29 20:07:14.230667945 +0100
+ /var/lib/samba/** rwk,
That is already covered via abstractions/samba (in Tumbleweed, not sure about SLE), so I don't see the need to add it to the nmbd profile. (Do you have some *.rpmnew in /etc/apparmor.d/ on your system?)
+++ old/usr.sbin.winbindd 2015-07-29 20:06:25.099322583 +0100
+ /etc/samba/smbd.tmp/** rwk, /etc/samba/smbd.tmp/msg/ rw, /etc/samba/smbd.tmp/msg/* rw,
That might be too much ;-) A quick test ("rcwinbindd start") shows missing k permissions for /etc/samba/smbd.tmp/msg/names.tdb. Therefore I propose: (winbindd profile) - /etc/samba/smbd.tmp/msg/* rw, + /etc/samba/smbd.tmp/msg/* rwk, Can you please check if this is enough? (If not, what are the actual filenames that need rwk permissions?) -- You are receiving this mail because: You are on the CC list for the bug.