[apparmor] [patch] Update Samba profiles for Samba 4.2

2015-05-18 Thread Christian Boltz
Hello, Samba 4.2 needs some more permissions for nmbd and winbindd. To avoid overcomplicated profiles, change abstractions/samba to allow /var/lib/samba/** rwk, (instead of **.tdb rwk) - this change already fixes the nmbd profile. winbindd additionally needs some more write permissions in

Re: [apparmor] [patch] Add the attach_disconnected flag to the ntpd profile

2015-05-18 Thread Seth Arnold
On Sun, May 17, 2015 at 01:31:03AM +0200, Christian Boltz wrote: Hello, this patch adds the attach_disconnected flag to the ntpd profile. I noticed disconnected path (run/nscd/*) events for ntpd while updating to the latest openSUSE Tumbleweed. I propose this patch for trunk and 2.9.

Re: [apparmor] [patch] drop unused match_net_include() and match_net_includes() from aa.py

2015-05-18 Thread Seth Arnold
On Sun, May 17, 2015 at 09:05:50PM +0200, Christian Boltz wrote: Hallo, aa-mergeprof no longer calls match_net_includes(), which means the function can be dropped. After that, match_net_include() is also unused, so also drop it. (Needless to mention that this depends on