|
|
109.
|
|
|
This package contains profiles for several other binaries.
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
serverguide/C/windows-networking.xml:660(para)
|
|
|
110.
|
|
|
By default the profiles for <application>smbd</application> and <application>nmbd</application> are in <emphasis>complain</emphasis> mode allowing Samba to work without modifying the profile, and only logging errors. To place the <application>smbd</application> profile into <emphasis>enforce</emphasis> mode, and have Samba work as expected, the profile will need to be modified to reflect any directories that are shared.
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
serverguide/C/windows-networking.xml:665(para)
|
|
|
111.
|
|
|
Edit <filename>/etc/apparmor.d/usr.sbin.smbd</filename> adding information for <emphasis>[share]</emphasis> from the file server example:
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
serverguide/C/windows-networking.xml:672(para)
|
|
|
112.
|
|
|
/srv/samba/share/ r,
/srv/samba/share/** rwkix,
|
|
|
represents a line break.
Start a new line in the equivalent position in the translation.
|
|
|
represents a space character.
Enter a space in the equivalent position in the translation.
|
|
|
|
|
/srv/samba/share/ r,
/srv/samba/share/** rwkix,
|
|
Translated by
anna marti
|
|
Reviewed by
David Planella
|
|
|
|
Located in
serverguide/C/windows-networking.xml:677(programlisting)
|
|
|
113.
|
|
|
Now place the profile into <emphasis>enforce</emphasis> and reload it:
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
serverguide/C/windows-networking.xml:682(para)
|
|
|
114.
|
|
|
sudo aa-enforce /usr/sbin/smbd
|
|
|
|
|
sudo aa-enforce /usr/sbin/smbd
|
|
Translated by
anna marti
|
|
Reviewed by
David Planella
|
|
|
|
Located in
serverguide/C/windows-networking.xml:687(command)
|
|
|
115.
|
|
|
cat /etc/apparmor.d/usr.sbin.smbd | sudo apparmor_parser -r
|
|
|
|
|
cat /etc/apparmor.d/usr.sbin.smbd | sudo apparmor_parser -r
|
|
Translated by
anna marti
|
|
Reviewed by
David Planella
|
|
|
|
Located in
serverguide/C/windows-networking.xml:688(command)
|
|
|
116.
|
|
|
You should now be able to read, write, and execute files in the shared directory as normal, and the <application>smbd</application> binary will have access to only the configured files and directories. Be sure to add entries for each directory you configure Samba to share. Also, any errors will be logged to <filename>/var/log/syslog</filename>.
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
serverguide/C/windows-networking.xml:691(para)
|
|
|
117.
|
|
|
O'Reilly's <ulink url="http://www.oreilly.com/catalog/9780596007690/">Using Samba</ulink> is also a good reference.
|
|
|
|
|
El llibre d'O'Reilly <ulink url="http://www.oreilly.com/catalog/9780596007690/">Using Samba</ulink> és també una bona referència.
|
|
Translated and reviewed by
David Planella
|
|
|
|
Located in
serverguide/C/windows-networking.xml:716(para) serverguide/C/windows-networking.xml:1096(para)
|
|
|
118.
|
|
|
<ulink url="http://samba.org/samba/docs/man/Samba-HOWTO-Collection/securing-samba.html">Chapter 18</ulink> of the Samba HOWTO Collection is devoted to security.
|
|
|
|
|
El capítol 18 de l'enllaç <ulink url="http://samba.org/samba/docs/man/Samba-HOWTO-Collection/securing-samba.html"> de la col·lecció HOWTO del Samba tracta sobre seguretat.
|
|
Translated by
anna marti
|
|
Reviewed by
David Planella
|
|
|
|
Located in
serverguide/C/windows-networking.xml:722(para)
|
