Hello community, here is the log from the commit of package apparmor for openSUSE:Factory checked in at 2018-05-13 15:53:56 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/apparmor (Old) and /work/SRC/openSUSE:Factory/.apparmor.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "apparmor" Sun May 13 15:53:56 2018 rev:117 rq:605723 version:2.13 Changes: -------- --- /work/SRC/openSUSE:Factory/apparmor/apparmor.changes 2018-04-30 08:50:02.698785013 +0200 +++ /work/SRC/openSUSE:Factory/.apparmor.new/apparmor.changes 2018-05-13 15:54:04.166403994 +0200 @@ -1,0 +2,7 @@ +Tue May 8 15:37:32 UTC 2018 - [email protected] + +- add fix-samba-profiles.patch - smbd loads new shared libraries. + Allow winbindd to access new kerberos credential cache location + (boo#1092099) + +------------------------------------------------------------------- New: ---- fix-samba-profiles.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ apparmor.spec ++++++ --- /var/tmp/diff_new_pack.BotGa0/_old 2018-05-13 15:54:07.190293643 +0200 +++ /var/tmp/diff_new_pack.BotGa0/_new 2018-05-13 15:54:07.194293497 +0200 @@ -71,6 +71,9 @@ # exclude the /etc/apparmor.d/cache.d directory from aa-logprof parsing Patch10: logprof-skip-cache-d.diff +# bug 1092099 - Allow smbd to load new shared libraries. Allow Winbindd to read and write new kerberos cache location +Patch11: fix-samba-profiles.patch + PreReq: sed BuildRoot: %{_tmppath}/%{name}-%{version}-build %define apparmor_bin_prefix /lib/apparmor @@ -361,6 +364,7 @@ %patch8 %patch9 -p1 %patch10 +%patch11 -p1 %build export SUSE_ASNEEDED=0 ++++++ fix-samba-profiles.patch ++++++ diff --git a/profiles/apparmor.d/usr.sbin.smbd b/profiles/apparmor.d/usr.sbin.smbd index 8f54e9c0..cbd03bad 100644 --- a/profiles/apparmor.d/usr.sbin.smbd +++ b/profiles/apparmor.d/usr.sbin.smbd @@ -32,6 +32,8 @@ /usr/lib*/samba/charset/*.so mr, /usr/lib*/samba/auth/script.so mr, /usr/lib*/samba/pdb/*.so mr, + /usr/lib*/samba/auth/*.so mr, + /usr/lib*/samba/gensec/*.so mr, /usr/lib*/samba/{lowcase,upcase,valid}.dat r, /usr/lib/@{multiarch}/samba/*.so{,.[0-9]*} mr, /usr/lib/@{multiarch}/samba/**/ r, diff --git a/profiles/apparmor.d/usr.sbin.winbindd b/profiles/apparmor.d/usr.sbin.winbindd index f5f8cc08..5a906c0e 100644 --- a/profiles/apparmor.d/usr.sbin.winbindd +++ b/profiles/apparmor.d/usr.sbin.winbindd @@ -20,6 +20,7 @@ @{PROC}/sys/kernel/core_pattern r, /tmp/.winbindd/ w, /tmp/krb5cc_* rwk, + /run/user/*/krb5cc/* rwk, /usr/lib*/samba/gensec/krb*.so mr, /usr/lib*/samba/idmap/*.so mr, /usr/lib*/samba/nss_info/*.so mr,
