Project

General

Profile

Tâche #28480

Scénario #28295: Évolutions AD identifiées suite à expertise

Erreur Apparmor Samba/Bind9

Added by Gilles Grandgérard almost 2 years ago. Updated 11 months ago.

Status:
Fermé
Priority:
Normal
Start date:
04/29/2019
Due date:
% Done:

100%

Estimated time:
0.00 h
Remaining (hours):
0.0

Description

AVC apparmor="DENIED" operation="file_lock" profile="/usr/sbin/named" name="/var/lib/samba/bind-dns/dns.keytab" pid=738 comm="isc-worker0002" requested_mask="k" denied_mask="k" fsuid=111 ouid=0

AVC apparmor="DENIED" operation="open" profile="/usr/sbin/named" name="/dev/urandom" pid=726 comm="isc-worker0002" requested_mask="wc" denied_mask="wc" fsuid=111 ouid=0

Ajouter :
/var/lib/samba/bind-dns/dns.keytab rk,
/etc/samba/smb.conf r,
/etc/samba/smb.conf.d/** r,
/var/tmp/** rwmk,
/dev/urandom rw,

cf./ https://wiki.samba.org/index.php/BIND9_DLZ_AppArmor_and_SELinux_Integration

Associated revisions

Revision 77c69bd2 (diff)
Added by Gilles Grandgérard almost 2 years ago

correction erreurs Apparmor liées à BIND9 / Samba

REF #28480

Revision cfa5022e (diff)
Added by Gilles Grandgérard almost 2 years ago

correction erreurs Apparmor liées à BIND9 / Samba

REF #28480

Revision 384e0413 (diff)
Added by Daniel Dehennin almost 2 years ago

Revert "correction erreurs Apparmor liées à BIND9 / Samba"

This should have been done on “master”.

This reverts commit 77c69bd2026083cb948a817ae331f74c8bd2512b.

History

#1 Updated by Gilles Grandgérard almost 2 years ago

  • Status changed from Nouveau to Résolu

#2 Updated by Gérald Schwartzmann almost 2 years ago

  • Assigned To set to Gilles Grandgérard

#3 Updated by Joël Cuissinat almost 2 years ago

  • % Done changed from 0 to 100

Fait en 2.7.1

#4 Updated by Joël Cuissinat almost 2 years ago

  • Status changed from Résolu to Fermé
  • Remaining (hours) set to 0.0

Also available in: Atom PDF