I haven't manually defined any apparmor profiles, the first time I used apparmor was Tuesday after do-release-upgrade to intrepid made me install it. Everything I've got has come directly from either the Intrepid or the 4.1 proposed packages. Also, when I upgraded to 4.1, it didn't give me the typical debconf warning that I'd changed any config files and would I like to keep them or install the package maintainers' version, so I assumed it had replaced all the files in /etc/apparmor.d.
I've doublechecked, and /etc/apparmor.d/usr.sbin.clamd is the only file in /etc/apparmor.d that contains a reference to clamd.
As well, since installing the proposed 4.1 packages, now I'm getting complains about smbd:
And I can see the following in /etc/apparmor.d/usr.sbin.smbd:
/var/lib/samba/** rk,
So that explains that, I just don't know why that would be different from the original Intrepid package. It doesn't warn me about that very often though, so it may be that I just didn't notice it from the original package.
It does not contain that line, no.
I haven't manually defined any apparmor profiles, the first time I used apparmor was Tuesday after do-release-upgrade to intrepid made me install it. Everything I've got has come directly from either the Intrepid or the 4.1 proposed packages. Also, when I upgraded to 4.1, it didn't give me the typical debconf warning that I'd changed any config files and would I like to keep them or install the package maintainers' version, so I assumed it had replaced all the files in /etc/apparmor.d.
I've doublechecked, and /etc/apparmor. d/usr.sbin. clamd is the only file in /etc/apparmor.d that contains a reference to clamd.
As well, since installing the proposed 4.1 packages, now I'm getting complains about smbd:
Nov 6 00:21:35 mr-t kernel: [23514.474754] type=1502 audit(122595969 5.171:1889) : operation= "inode_ permission" requested_ mask="rw: :" denied_mask="w::" fsuid=0 name="/ var/lib/ samba/group_ mapping. ldb" pid=17324 profile= "/usr/sbin/ smbd"
And I can see the following in /etc/apparmor. d/usr.sbin. smbd:
/var/lib/samba/** rk,
So that explains that, I just don't know why that would be different from the original Intrepid package. It doesn't warn me about that very often though, so it may be that I just didn't notice it from the original package.