Comment 15 for bug 286080

Revision history for this message
Tessa (unit3) wrote :

It does not contain that line, no.

I haven't manually defined any apparmor profiles, the first time I used apparmor was Tuesday after do-release-upgrade to intrepid made me install it. Everything I've got has come directly from either the Intrepid or the 4.1 proposed packages. Also, when I upgraded to 4.1, it didn't give me the typical debconf warning that I'd changed any config files and would I like to keep them or install the package maintainers' version, so I assumed it had replaced all the files in /etc/apparmor.d.

I've doublechecked, and /etc/apparmor.d/usr.sbin.clamd is the only file in /etc/apparmor.d that contains a reference to clamd.

As well, since installing the proposed 4.1 packages, now I'm getting complains about smbd:

Nov 6 00:21:35 mr-t kernel: [23514.474754] type=1502 audit(1225959695.171:1889): operation="inode_permission" requested_mask="rw::" denied_mask="w::" fsuid=0 name="/var/lib/samba/group_mapping.ldb" pid=17324 profile="/usr/sbin/smbd"

And I can see the following in /etc/apparmor.d/usr.sbin.smbd:

  /var/lib/samba/** rk,

So that explains that, I just don't know why that would be different from the original Intrepid package. It doesn't warn me about that very often though, so it may be that I just didn't notice it from the original package.