diff -u apparmor-2.1+1075/debian/changelog apparmor-2.1+1075/debian/changelog
--- apparmor-2.1+1075/debian/changelog
+++ apparmor-2.1+1075/debian/changelog
@@ -1,3 +1,10 @@
+apparmor (2.1+1075-0ubuntu9.1) hardy-proposed; urgency=low
+
+  * added abstractions/smbpass and #include it in abstractions/authentication
+    to allow access to /var/lib/samba/*.tdb. LP: #217787
+
+ -- Jamie Strandboge <jamie@ubuntu.com>  Fri, 02 May 2008 13:13:52 -0400
+
 apparmor (2.1+1075-0ubuntu9) hardy; urgency=low
 
   * parser/rc.apparmor.functions: do not abort if parser is missing, in
diff -u apparmor-2.1+1075/profiles/apparmor.d/abstractions/authentication apparmor-2.1+1075/profiles/apparmor.d/abstractions/authentication
--- apparmor-2.1+1075/profiles/apparmor.d/abstractions/authentication
+++ apparmor-2.1+1075/profiles/apparmor.d/abstractions/authentication
@@ -46,0 +47,4 @@
+
+  # smbpass
+  #include <abstractions/smbpass>
+
only in patch2:
unchanged:
--- apparmor-2.1+1075.orig/profiles/apparmor.d/abstractions/smbpass
+++ apparmor-2.1+1075/profiles/apparmor.d/abstractions/smbpass
@@ -0,0 +1,4 @@
+# vim:syntax=apparmor
+# libpam-smbpass/pam_smbpass.so permissions
+
+  /var/lib/samba/*.tdb rwk,