As you've just seen, I used aa-enforce to put the two Samba-related profiles into enforce mode. But watch what happens now when I try to restart Samba in order to get the profiles to take effect:
donnie@ubuntu3:/etc/apparmor.d$ sudo systemctl restart smbdJob for smbd.service failed because the control process exited with error code. See "systemctl status smbd.service" and "journalctl -xe" for details.donnie@ubuntu3:/etc/apparmor.d$
Okay, that's not good. Looking at the status for the smbd service, I see the following:
donnie@ubuntu3:/etc/apparmor.d$ sudo systemctl status smbd● smbd.service - LSB: start Samba SMB/CIFS daemon (smbd) Loaded: loaded (/etc/init.d/smbd; bad; vendor preset: enabled) ...
