Results 1 to 8 of 8

Thread: Want AppArmor to stop interfering w/Samba

  1. #1
    Join Date
    Jan 2009
    Location
    Ottawa, Canada
    Posts
    64

    Default Want AppArmor to stop interfering w/Samba

    I managed to get Samba to allow access to a mount through a sym link, but now AppArmor is interfering. When I use its cryptic features, it allows access to individual directories. How do I get it to stop interfering with an entire directory tree?

  2. #2
    Join Date
    Jul 2008
    Location
    Seattle, WA
    Posts
    17,317

    Default Re: Want AppArmor to stop interfering w/Samba

    On Sat, 14 Dec 2013 16:56:01 +0000, PenguinLust wrote:

    > I managed to get Samba to allow access to a mount through a sym link,
    > but now AppArmor is interfering. When I use its cryptic features, it
    > allows access to individual directories. How do I get it to stop
    > interfering with an entire directory tree?


    Disable the profile for Samba.

    Jim



    --
    Jim Henderson
    openSUSE Forums Administrator
    Forum Use Terms & Conditions at http://tinyurl.com/openSUSE-T-C

  3. #3
    Join Date
    Feb 2009
    Location
    Spain
    Posts
    25,547

    Default Re: Want AppArmor to stop interfering w/Samba

    On 2013-12-14 17:56, PenguinLust wrote:
    >
    > I managed to get Samba to allow access to a mount through a sym link,
    > but now AppArmor is interfering. When I use its cryptic features, it
    > allows access to individual directories. How do I get it to stop
    > interfering with an entire directory tree?


    Double asterisk.

    --
    Cheers / Saludos,

    Carlos E. R.
    (from 12.3 x86_64 "Dartmouth" at Telcontar)

  4. #4

    Thumbs up Re: Want AppArmor to stop interfering w/Samba

    Quote Originally Posted by hendersj View Post
    On Sat, 14 Dec 2013 16:56:01 +0000, PenguinLust wrote:

    > I managed to get Samba to allow access to a mount through a sym link,
    > but now AppArmor is interfering. When I use its cryptic features, it
    > allows access to individual directories. How do I get it to stop
    > interfering with an entire directory tree?


    Disable the profile for Samba.

    Jim
    Thank you! Solved my issues too...
    Cheers,

    Rod Schaffter

  5. #5

    Default Re: Want AppArmor to stop interfering w/Samba

    need to do the same thing but do not know where to go to edit

    Which file must be edited?
    What should I write?

    Thanks in advance

  6. #6

    Default Re: Want AppArmor to stop interfering w/Samba

    Quote Originally Posted by NeverGiveUp01 View Post
    need to do the same thing but do not know where to go to edit

    Which file must be edited?
    What should I write?

    Thanks in advance
    To update the AppArmor profile run "sudo /usr/sbin/logprof" and answer the questions (select (A)llow for all things smbd and nmbd want to access, then select (S)ave to save the profile).

    To disable any blocking by the Apparmor profile, run YaST->Security and Users->AppArmor Configuration->Settings, click on "Configure" and set both usr.sbin.nmbd and usr.sbin.smbd to "complain" instead of "enforce". AppArmor will then only log, and not block anything.

  7. #7
    Join Date
    Feb 2009
    Location
    Spain
    Posts
    25,547

    Default Re: Want AppArmor to stop interfering w/Samba

    On 2014-01-03 11:06, wolfi323 wrote:

    > To disable any blocking by the Apparmor profile, run YaST->Security and
    > Users->AppArmor Configuration->Settings, click on "Configure" and set
    > both usr.sbin.nmbd and usr.sbin.smbd to "complain" instead of "enforce".
    > AppArmor will then only log, and not block anything.


    Yes, but on some circumstances this causes the logs to grow a lot. To totally disable a profile,
    just move it to somewhere else. Active profiles are stored on /etc/apparmor.d/

    --
    Cheers / Saludos,

    Carlos E. R.
    (from 13.1 x86_64 "Bottle" (Elessar))

  8. #8

    Default AW: Re: Want AppArmor to stop interfering w/Samba

    Quote Originally Posted by robin_listas View Post
    On 2014-01-03 11:06, wolfi323 wrote:

    > To disable any blocking by the Apparmor profile, run YaST->Security and
    > Users->AppArmor Configuration->Settings, click on "Configure" and set
    > both usr.sbin.nmbd and usr.sbin.smbd to "complain" instead of "enforce".
    > AppArmor will then only log, and not block anything.


    Yes, but on some circumstances this causes the logs to grow a lot. To totally disable a profile,
    just move it to somewhere else. Active profiles are stored on /etc/apparmor.d/
    You can also completely remove a profile in YaST->Security and Users->AppArmor Configuration->Manage existing Profiles...

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •