Want AppArmor to stop interfering w/Samba

English Network/Internet
#1

I managed to get Samba to allow access to a mount through a sym link, but now AppArmor is interfering. When I use its cryptic features, it allows access to individual directories. How do I get it to stop interfering with an entire directory tree?

#2

On Sat, 14 Dec 2013 16:56:01 +0000, PenguinLust wrote:

> I managed to get Samba to allow access to a mount through a sym link,
> but now AppArmor is interfering. When I use its cryptic features, it
> allows access to individual directories. How do I get it to stop
> interfering with an entire directory tree?

Disable the profile for Samba.

Jim

–
Jim Henderson
openSUSE Forums Administrator
Forum Use Terms & Conditions at http://tinyurl.com/openSUSE-T-C

#3

On 2013-12-14 17:56, PenguinLust wrote:
>
> I managed to get Samba to allow access to a mount through a sym link,
> but now AppArmor is interfering. When I use its cryptic features, it
> allows access to individual directories. How do I get it to stop
> interfering with an entire directory tree?

Double asterisk.

–
Cheers / Saludos,

Carlos E. R.
(from 12.3 x86_64 “Dartmouth” at Telcontar)

#4

Thank you! Solved my issues too… :slight_smile:

#5

need to do the same thing but do not know where to go to edit

Which file must be edited?
What should I write?

Thanks in advance

#6

To update the AppArmor profile run “sudo /usr/sbin/logprof” and answer the questions (select (A)llow for all things smbd and nmbd want to access, then select (S)ave to save the profile).

To disable any blocking by the Apparmor profile, run YaST->Security and Users->AppArmor Configuration->Settings, click on “Configure” and set both usr.sbin.nmbd and usr.sbin.smbd to “complain” instead of “enforce”. AppArmor will then only log, and not block anything.

#7

On 2014-01-03 11:06, wolfi323 wrote:

> To disable any blocking by the Apparmor profile, run YaST->Security and
> Users->AppArmor Configuration->Settings, click on “Configure” and set
> both usr.sbin.nmbd and usr.sbin.smbd to “complain” instead of “enforce”.
> AppArmor will then only log, and not block anything.

Yes, but on some circumstances this causes the logs to grow a lot. To totally disable a profile,
just move it to somewhere else. Active profiles are stored on /etc/apparmor.d/

–
Cheers / Saludos,

Carlos E. R.
(from 13.1 x86_64 “Bottle” (Elessar))

#8

You can also completely remove a profile in YaST->Security and Users->AppArmor Configuration->Manage existing Profiles…