|
|
103.
|
|
|
<phrase>Kubuntu</phrase> comes with the <application>AppArmor</application> security module, which provides mandatory access controls. The default AppArmor profile for Samba will need to be adapted to the proper configuration. For more details on using AppArmor, please refer to the<ulink url="https://help.ubuntu.com/community/AppArmor"> wiki</ulink>
|
|
|
|
|
<phrase>Kubuntu</phrase> viene con el modulo de seguridad <application>AppArmor</application>, el cual proporciona controles de acceso obligatorios. El perfil por defecto de AppArmor de Samba necesitará ser adaptado a su propia configuración. Para más detalles en el uso de AppArmor, diríjase por favor al <ulink url="htpps://help.ubuntu.com/community/AppArmor"> wiki</ulink>
|
|
Translated and reviewed by
Adolfo Jayme Barrientos
|
|
|
|
Located in
../docs/sharing/C/sharing.xml:594(para)
|
|
|
104.
|
|
|
There are default AppArmor profiles for <filename>/usr/sbin/smbd</filename> and <filename>/usr/sbin/nmbd</filename>, the Samba daemon binaries, as part of the <application>apparmor-profiles</application> packages. To install the package, from a terminal prompt, enter:
|
|
|
|
|
Hay perfiles predeterminados de AppArmor para <filename>/usr/sbin/smbd</filename> y <filename>/usr/sbin/nmbd</filename>, los binarios del demonio Samba, como parte del paquete <application>apparmor-profiles</applicaction>. Para instalar el paquete, desde la terminal, introduzca:
|
|
Translated and reviewed by
Adolfo Jayme Barrientos
|
|
|
|
Located in
../docs/sharing/C/sharing.xml:602(para)
|
|
|
105.
|
|
|
sudo apt-get install apparmor-profiles
|
|
|
|
|
sudo apt-get install apparmor-profiles
|
|
Translated and reviewed by
Adolfo Jayme Barrientos
|
|
|
|
Located in
docs/sharing/C/sharing.xml:652(command)
|
|
|
106.
|
|
|
This package contains profiles for several other binaries.
|
|
|
|
|
Este paquete contiene perfiles para distintos binarios.
|
|
Translated and reviewed by
Adolfo Jayme Barrientos
|
|
|
|
Located in
docs/sharing/C/sharing.xml:656(para)
|
|
|
107.
|
|
|
By default the profiles for <application>smbd</application> and <application>nmbd</application> are in <emphasis>complain</emphasis> mode, allowing Samba to work without modifying the profile, and only logging errors. To place the <application>smbd</application> profile into <emphasis>enforce</emphasis> mode, and have Samba work as expected, the profile will need to be modified to reflect any directories that are shared.
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
../docs/sharing/C/sharing.xml:619(para)
|
|
|
108.
|
|
|
Edit <filename>/etc/apparmor.d/usr.sbin.smbd</filename>, adding information for <emphasis>[share]</emphasis> from the file server example:
|
|
|
|
|
Edite <filename>/etc/apparmor.d/usr.sbin.smbd</filename>, añadiendo información para <emphasis>[share]</emphasis> desde el ejemplo de servidor de archivos:
|
|
Translated and reviewed by
Adolfo Jayme Barrientos
|
|
|
|
Located in
docs/sharing/C/sharing.xml:671(para)
|
|
|
109.
|
|
|
/srv/samba/share/ r,
/srv/samba/share/** rwkix,
|
|
|
represents a line break.
Start a new line in the equivalent position in the translation.
|
|
|
|
|
/srv/samba/share/ r,
/srv/samba/share/** rwkix,
|
|
Translated and reviewed by
Adolfo Jayme Barrientos
|
|
|
|
Located in
docs/sharing/C/sharing.xml:676(programlisting)
|
|
|
110.
|
|
|
Now place the profile into <emphasis>enforce</emphasis> and reload it:
|
|
|
|
|
Ahora coloque el perfil dentro de <emphasis>enforce</emphasis> y recárguelo:
|
|
Translated and reviewed by
Adolfo Jayme Barrientos
|
|
|
|
Located in
../docs/sharing/C/sharing.xml:638(para)
|
|
|
111.
|
|
|
sudo aa-enforce /usr/sbin/smbd
|
|
|
|
|
sudo aa-enforce /usr/sbin/smbd
|
|
Translated and reviewed by
Adolfo Jayme Barrientos
|
|
|
|
Located in
docs/sharing/C/sharing.xml:686(command)
|
|
|
112.
|
|
|
cat /etc/apparmor.d/usr.sbin.smbd | sudo apparmor_parser -r
|
|
|
|
|
cat /etc/apparmor.d/usr.sbin.smbd | sudo apparmor_parser -r
|
|
Translated and reviewed by
Adolfo Jayme Barrientos
|
|
|
|
Located in
docs/sharing/C/sharing.xml:687(command)
|
