|
|
105.
|
|
|
The <application>setfacl</application> command above gives <emphasis>execute</emphasis> permissions to all files in the <filename>/srv/samba/share</filename> directory, which you may or may not want.
|
|
|
|
|
(no translation yet)
|
|
Translated by
Adi Roiban
|
|
Reviewed by
Adi Roiban
|
|
|
|
Located in
serverguide/C/windows-networking.xml:627(para)
|
|
|
106.
|
|
|
Now from a Windows client you should notice the new file permissions are implemented. See the <application>acl</application> and <application>setfacl</application> man pages for more information on POSIX ACLs.
|
|
|
|
|
Acum de la un client Windows ar trebui să observați că noile permisiuni de fișier sunt implementate. Pentru mai multe informații despre POSIX ACLs consultați paginile de manual ale aplicațiilor <application>acl</application> și <application>setfacl</application>.
|
|
Translated by
Doru Horișco
|
|
Reviewed by
Adi Roiban
|
|
|
|
Located in
serverguide/C/windows-networking.xml:633(para)
|
|
|
107.
|
|
|
Samba AppArmor Profile
|
|
|
|
|
Profilul Samba AppArmor
|
|
Translated by
Dan Telecan
|
|
Reviewed by
Doru Horișco
|
|
|
|
Located in
serverguide/C/windows-networking.xml:641(title)
|
|
|
108.
|
|
|
Ubuntu comes with the <application>AppArmor</application> security module, which provides mandatory access controls. The default AppArmor profile for Samba will need to be adapted to your configuration. For more details on using AppArmor see <xref linkend="apparmor"/>.
|
|
|
|
|
Ubuntu are direct instalat modulul de securitate <application>AppArmor</application>, care furnizează controale de acces de tip mandat. Profilul implicit AppArmor pentru Samba va trebui adaptat la configurația dumneavoastră. Vizitați <xref linkend="apparmor"/> pentru mai multe detalii depre folosirea AppArmor.
|
|
Translated by
Dan Telecan
|
|
Reviewed by
Doru Horișco
|
|
|
|
Located in
serverguide/C/windows-networking.xml:643(para)
|
|
|
109.
|
|
|
There are default AppArmor profiles for <filename>/usr/sbin/smbd</filename> and <filename>/usr/sbin/nmbd</filename>, the Samba daemon binaries, as part of the <application>apparmor-profiles</application> packages. To install the package, from a terminal prompt enter:
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
serverguide/C/windows-networking.xml:649(para)
|
|
|
110.
|
|
|
sudo apt-get install apparmor-profiles
|
|
|
|
|
sudo apt-get install apparmor-profiles
|
|
Translated by
Dan Telecan
|
|
Reviewed by
Doru Horișco
|
|
|
|
Located in
serverguide/C/windows-networking.xml:656(command) serverguide/C/security.xml:925(command)
|
|
|
111.
|
|
|
This package contains profiles for several other binaries.
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
serverguide/C/windows-networking.xml:660(para)
|
|
|
112.
|
|
|
By default the profiles for <application>smbd</application> and <application>nmbd</application> are in <emphasis>complain</emphasis> mode allowing Samba to work without modifying the profile, and only logging errors. To place the <application>smbd</application> profile into <emphasis>enforce</emphasis> mode, and have Samba work as expected, the profile will need to be modified to reflect any directories that are shared.
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
serverguide/C/windows-networking.xml:665(para)
|
|
|
113.
|
|
|
Edit <filename>/etc/apparmor.d/usr.sbin.smbd</filename> adding information for <emphasis>[share]</emphasis> from the file server example:
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
serverguide/C/windows-networking.xml:672(para)
|
|
|
114.
|
|
|
/srv/samba/share/ r,
/srv/samba/share/** rwkix,
|
|
|
represents a line break.
Start a new line in the equivalent position in the translation.
|
|
|
represents a space character.
Enter a space in the equivalent position in the translation.
|
|
|
|
|
/srv/samba/share/ r,
/srv/samba/share/** rwkix,
|
|
Translated and reviewed by
Doru Horișco
|
|
|
|
Located in
serverguide/C/windows-networking.xml:677(programlisting)
|
