Skip to content

Update usr.sbin.winbindd profile to allow krb5 rcache files locking

Samuel Cabrero requested to merge scabrero/apparmor:master into master

Samba 4.12.0 together with krb5 1.18 needs file locking permissions in the krb5 rache directory:

type=AVC msg=audit(1584708328.422:76): apparmor="DENIED" operation="file_lock" profile="winbindd" name="/var/cache/krb5rcache/krb5_20500.rcache2" pid=1461 comm="winbindd" requested_mask="k" denied_mask="k" fsuid=20500 ouid=20500

Signed-off-by: Samuel Cabrero scabrero@suse.de

Merge request reports