From d5278f9d06f1db140f0f7c39954182e3600a3d80 Mon Sep 17 00:00:00 2001 From: Emiliano Vavassori Date: Thu, 20 Aug 2015 04:34:13 +0200 Subject: [PATCH] Fixing apparmor stuff with domain and NTP. --- roles/domain/tasks/ntp.yml | 9 +++++++++ roles/domain/tasks/smb_config.yml | 8 ++++++++ 2 files changed, 17 insertions(+) diff --git a/roles/domain/tasks/ntp.yml b/roles/domain/tasks/ntp.yml index 7fe0caa..9c69f43 100644 --- a/roles/domain/tasks/ntp.yml +++ b/roles/domain/tasks/ntp.yml @@ -8,6 +8,15 @@ sudo: yes register: cfg_ntp +- name: Permetto a NTP di utilizzare informazioni da winbind + lineinfile: + dest: /etc/apparmor.d/usr.sbin.ntpd + regexp: "^/run/samba/winbindd/pipe" + line: '/run/samba/winbindd/pipe crw,' + insertafter: 'samba/ntp_signd/socket' + state: present + sudo: yes + - name: Riavvio ntp service: name=ntp state=restarted sudo: yes diff --git a/roles/domain/tasks/smb_config.yml b/roles/domain/tasks/smb_config.yml index 6a4d41e..3690280 100644 --- a/roles/domain/tasks/smb_config.yml +++ b/roles/domain/tasks/smb_config.yml @@ -4,6 +4,14 @@ sudo: yes register: cfg_samba +- name: Configuro la home per apparmor + lineinfile: + dest: /etc/apparmor.d/tunables/home + regexp: '^@\{HOMEDIRS\}=/home/ /home/{{ domainshort }}/$' + line: '^@{HOMEDIRS}=/home/ /home/{{ domainshort }}/' + state: present + sudo: yes + - name: Riavvio samba shell: restart smbd sudo: yes