[Samba] BIND 9.9 apparmor rules with Samba

Rowland Penny rowlandpenny241155 at gmail.com
Thu Sep 3 08:17:23 UTC 2015


On 03/09/15 03:04, Fred Smith wrote:
> Hi
>
> Current wiki suggestion
> (https://wiki.samba.org/index.php/Configure_BIND_as_backend_for_Samba_AD#Interaction_with_AppArmor_or_SELinux)
> is to add the following to /etc/apparmor.d/local/usr.sbin.named
>
> # Samba4 DLZ and Active Directory Zones (default source installation)
> /usr/local/samba/lib/** rm,
> /usr/local/samba/private/dns.keytab r,
> /usr/local/samba/private/named.conf r,
> /usr/local/samba/private/dns/** rwk,
>
> # Ubuntu
> /var/tmp/** rwmk,
>
> I found I needed to add an extra line for bind to start.
>
> /usr/local/samba/etc/smb.conf r,
>
>
> Regards
>
> Fred.
>

OK, Thanks for posting this, but what distro and version ?

Once you post this, I will update the wiki

Rowland





More information about the samba mailing list