[Samba] BIND 9.9 apparmor rules with Samba

Fred Smith fs582087 at gmail.com
Thu Sep 3 02:04:31 UTC 2015


Current wiki suggestion
is to add the following to /etc/apparmor.d/local/usr.sbin.named

# Samba4 DLZ and Active Directory Zones (default source installation)
/usr/local/samba/lib/** rm,
/usr/local/samba/private/dns.keytab r,
/usr/local/samba/private/named.conf r,
/usr/local/samba/private/dns/** rwk,

# Ubuntu
/var/tmp/** rwmk,

I found I needed to add an extra line for bind to start.

/usr/local/samba/etc/smb.conf r,



More information about the samba mailing list