|
105.
|
|
|
sudo apt-get install apparmor-profiles
|
|
|
|
sudo apt-get install apparmor-profiles
|
|
Translated and reviewed by
Adolfo Jayme Barrientos
|
|
|
|
Located in
docs/sharing/C/sharing.xml:652(command)
|
|
106.
|
|
|
This package contains profiles for several other binaries.
|
|
|
|
Este paquete contiene perfiles para distintos binarios.
|
|
Translated and reviewed by
Adolfo Jayme Barrientos
|
|
|
|
Located in
docs/sharing/C/sharing.xml:656(para)
|
|
107.
|
|
|
By default the profiles for <application>smbd</application> and <application>nmbd</application> are in <emphasis>complain</emphasis> mode, allowing Samba to work without modifying the profile, and only logging errors. To place the <application>smbd</application> profile into <emphasis>enforce</emphasis> mode, and have Samba work as expected, the profile will need to be modified to reflect any directories that are shared.
|
|
|
|
(no translation yet)
|
|
|
|
Located in
../docs/sharing/C/sharing.xml:619(para)
|
|
108.
|
|
|
Edit <filename>/etc/apparmor.d/usr.sbin.smbd</filename>, adding information for <emphasis>[share]</emphasis> from the file server example:
|
|
|
|
Edite <filename>/etc/apparmor.d/usr.sbin.smbd</filename>, añadiendo información para <emphasis>[share]</emphasis> desde el ejemplo de servidor de archivos:
|
|
Translated and reviewed by
Adolfo Jayme Barrientos
|
|
|
|
Located in
docs/sharing/C/sharing.xml:671(para)
|
|
109.
|
|
|
/srv/samba/share/ r,
/srv/samba/share/** rwkix,
|
|
|
represents a line break.
Start a new line in the equivalent position in the translation.
|
|
|
|
/srv/samba/share/ r,
/srv/samba/share/** rwkix,
|
|
Translated and reviewed by
Adolfo Jayme Barrientos
|
|
|
|
Located in
docs/sharing/C/sharing.xml:676(programlisting)
|
|
110.
|
|
|
Now place the profile into <emphasis>enforce</emphasis> and reload it:
|
|
|
|
Ahora coloque el perfil dentro de <emphasis>enforce</emphasis> y recárguelo:
|
|
Translated and reviewed by
Adolfo Jayme Barrientos
|
|
|
|
Located in
../docs/sharing/C/sharing.xml:638(para)
|
|
111.
|
|
|
sudo aa-enforce /usr/sbin/smbd
|
|
|
|
sudo aa-enforce /usr/sbin/smbd
|
|
Translated and reviewed by
Adolfo Jayme Barrientos
|
|
|
|
Located in
docs/sharing/C/sharing.xml:686(command)
|
|
112.
|
|
|
cat /etc/apparmor.d/usr.sbin.smbd | sudo apparmor_parser -r
|
|
|
|
cat /etc/apparmor.d/usr.sbin.smbd | sudo apparmor_parser -r
|
|
Translated and reviewed by
Adolfo Jayme Barrientos
|
|
|
|
Located in
docs/sharing/C/sharing.xml:687(command)
|
|
113.
|
|
|
It is now possible to read, write, and execute files in the shared directory as normal, and the <application>smbd</application> binary will have access to only the configured files and directories. Be sure to add entries for each directory that Samba is configured to share. Any errors will be logged to <filename>/var/log/syslog</filename>.
|
|
|
|
Ahora se puede leer, escribir y ejecutar archivos en el directorio compartido como normal, y el binario <application>smbd</application> tendrá acceso solamente a los archivos y directorios configurados. Asegúrese de añadir entradas para cada directorio que se configuró para compartir con Samba. Cualquier error será registrado en <filename>/var/log/syslog</filename>.
|
|
Translated and reviewed by
Adolfo Jayme Barrientos
|
|
|
|
Located in
../docs/sharing/C/sharing.xml:647(para)
|
|
114.
|
|
|
For in depth Samba configurations, see the <ulink url="http://samba.org/samba/docs/man/Samba-HOWTO-Collection/">Samba HOWTO Collection</ulink>
|
|
|
|
Para ver en profundidad las configuraciones de Samba vea la <ulink url="http://samba.org/samba/docs/man/Samba-HOWTO-Collection/">colección de guías CÓMO de Samba</ulink>
|
|
Translated and reviewed by
Adolfo Jayme Barrientos
|
|
|
|
Located in
../docs/sharing/C/sharing.xml:661(para)
|