Kinetic is EOL.
** Changed in: apparmor (Ubuntu Kinetic)
Status: Fix Committed => Won't Fix
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1993572
Title:
samba
Hello Andreas, or anyone else affected,
Accepted apparmor into kinetic-proposed. The package will build now and
be available at
https://launchpad.net/ubuntu/+source/apparmor/3.0.7-1ubuntu2.1 in a few
hours, and then in the -proposed repository.
Please help us by testing this new package. See
This bug was fixed in the package apparmor - 3.0.7-1ubuntu4
---
apparmor (3.0.7-1ubuntu4) lunar; urgency=medium
* d/p/u/samba-rpcd-spoolss.patch: fix samba-rpcd-spoolss apparmor
profile (LP: #1993572)
-- Andreas Hasenack Wed, 23 Nov 2022 14:47:14
-0300
** Changed in:
** Merge proposal linked:
https://code.launchpad.net/~ahasenack/ubuntu/+source/apparmor/+git/apparmor/+merge/433541
** Merge proposal linked:
https://code.launchpad.net/~ahasenack/ubuntu/+source/apparmor/+git/apparmor/+merge/433542
--
You received this bug notification because you are a
** Description changed:
[ Impact ]
Users who chose to:
a) install apparmor-profiles (a package with extra optional apparmor
profiles, including samba)
b) change the samba related profiles from complain (the default) to
enforce mode
will find out that sharing a printing
** Description changed:
+ [ Impact ]
+
+ Users who chose to:
+
+ a) install apparmor-profiles (a package with extra optional apparmor
+ profiles, including samba)
+
+ b) change the samba related profiles from complain (the default) to
+ enforce mode
+
+ will find out that sharing a printing
** Changed in: apparmor (Ubuntu Kinetic)
Importance: Undecided => Critical
** Changed in: apparmor (Ubuntu Kinetic)
Importance: Critical => Undecided
** Changed in: apparmor (Ubuntu Kinetic)
Status: New => In Progress
** Changed in: apparmor (Ubuntu Kinetic)
Importance:
** Changed in: apparmor (Ubuntu)
Assignee: (unassigned) => Andreas Hasenack (ahasenack)
** Changed in: apparmor (Ubuntu)
Status: New => In Progress
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in
** Also affects: apparmor (Ubuntu Kinetic)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1993572
Title:
samba profile:
Submitted as https://gitlab.com/apparmor/apparmor/-/merge_requests/937
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1993572
Title:
samba profile: missing rule for
Er, correct, just "w" is enough :)
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1993572
Title:
samba profile: missing rule for mkdir /var/cache/samba/printing
Status
Typo? I'd expect 'Just "w" is enough' ;-)
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1993572
Title:
samba profile: missing rule for mkdir /var/cache/samba/printing
/var/cache/samba/printing/ w, # without r,
Just "r" was enough indeed!
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1993572
Title:
samba profile: missing rule for
** Description changed:
After the fix for bug #1990692, one more rule is needed it seems.
I put all samba profiles in enforce mode, and when I ran that final
- command, got an error and an apparmor denied message:
+ rpcclient command, got an error and an apparmor denied message:
+
+ Prep:
Based on your DENIED message, I wonder if read (= directory listing)
permissions are really needed, or if
/var/cache/samba/printing/ w, # without r
would be enough. Can you please test and report back?
--
You received this bug notification because you are a member of Ubuntu
Touch seeded
** Description changed:
- After the fix for #1990692, one more rule is needed it seems.
+ After the fix for bug #1990692, one more rule is needed it seems.
I put all samba profiles in enforce mode, and when I ran that final
command, got an error and an apparmor denied message:
$
This looks like is enough to address it:
--- samba-rpcd-spoolss.orig 2022-10-19 17:48:42.767775584 +
+++ samba-rpcd-spoolss 2022-10-19 17:47:50.527693050 +
@@ -18,6 +18,7 @@
/usr/lib*/samba/{,samba/}rpcd_spoolss mr,
/usr/lib*/samba/{,samba/}samba-bgqd Px -> samba-bgqd,
+
17 matches
Mail list logo
