Re: [apparmor] [PATCH] profiles: rw file perms are now needed on AF_UNIX socket files

2013-12-22 Thread Christian Boltz
Hello, Am Donnerstag, 19. Dezember 2013 schrieb Tyler Hicks: The AppArmor kernel now checks for both read and write permissions when a process calls connect() on a UNIX domain socket. The patch updates a four abstractions that were found to be needing changes after the kernel change. Does

[apparmor] [patch] allow samba to create /var/run/samba/

2013-12-22 Thread Christian Boltz
Hello, samba (nmbd and smbd) need to create /var/run/samba at startup (at least on systems where /var/run is on a tmpfs) References: https://bugzilla.novell.com/show_bug.cgi?id=856651 I propose this patch for trunk and 2.8 === modified file 'profiles/apparmor.d/abstractions/samba' ---