AppArmor: smbd has an enforced profile but run as unconfined

Hi Linux users,


I am on Ubuntu Lucid Lynx.

smbd runs as unconfined even though it has an AppArmor enforced profile.

Maybe it is called by another program at startup... Anyway, how can I sort it out?

Is this a bug? If yes, where can I request a correction?

Regards,

 

See here. It's also explained here. Generally, unconfined processes can be found by executing sudo unconfined.

So it should help to restart samba. It should be possible to automate that by adding

sleep 10
/etc/init.d/samba restart

before the exit 0 line in /etc/rc.local.

 

Yes, I tried the solutions listed in your links and nothing changes.

I'm gonna try your solution, but there is no real reason it works if the previous ones didn't.

 

I confirm that adding:
"sleep 10
/etc/init.d/samba restart

before the exit 0 line in /etc/rc.local."

doesn't help.

 

Lucy, I just found a hint that something has changed in Lucid on http://ubuntuforums.org/showthread.php?t=1464988 . I suggest that you try that solution.

 

Dear tlu,

Thank you to spend some time on my issue.

It doesn't help. I restart the service, and still it runs unconfined.

Furthermore, when I go to System/Preferences/Personnal files share, it indicates that file sharing on network can not be activated as some packages are not installed in my system.

Something is definitely wrong, or, for sure, there is something I didn't understand properly yet.

 

Did you install Samba? When you right click to share a folder first time in Ubuntu, its then installed.

 

I did in 9.10. I didn't check before I upgrade to Lucid.
I have a shared forlder.

 

Try a total purge and then reinstall samba.

 

That works for me in Lucid. smbd now starts confined after the 10 second sleep.

 

Hi there,

I made a clean by default install with format of Lucid, used the propositions presented here, and still I have saba running unconfined although I enforced the profile present in the repository.

Anyone an idea. It's really annoying and disturbing. Everything would be so perfect without this issue...

 

OK, I think I got it right: in etc/rc.local, insert
sleep 10
restart smbd

before exit 0

so that it looks like this:

 

I'm glad that you found the solution. It fits with the hint I gave in post #5.

 

You're right. Thak you.

It still looks strange for me as it does look like a workaround, instead of a real proper solution..