Allow smbd_t sys_admin capability so samba can change quota on users.
This commit is contained in:
parent
7ed755ab8b
commit
b3e7610270
@ -227,7 +227,7 @@ optional_policy(`
|
||||
#
|
||||
# smbd Local policy
|
||||
#
|
||||
allow smbd_t self:capability { chown fowner kill setgid setuid sys_nice sys_resource lease dac_override dac_read_search };
|
||||
allow smbd_t self:capability { chown fowner kill setgid setuid sys_nice sys_admin sys_resource lease dac_override dac_read_search };
|
||||
dontaudit smbd_t self:capability sys_tty_config;
|
||||
allow smbd_t self:process ~{ ptrace setcurrent setexec setfscreate setrlimit execmem execstack execheap };
|
||||
allow smbd_t self:process setrlimit;
|
||||
|
Loading…
Reference in New Issue
Block a user