Changeset 2236


Ignore:
Timestamp:
Dec 13, 2012, 7:23:26 PM (6 years ago)
Author:
matthijs
Message:

samba: Don't let Samba dereference symbolic links.

Doing could allow users to access parts of the root filesystem through
Samba, which is not desirable. Additionally, when mounted on a Linux
system, using rm -rf could delete files from outside the shared USB
disk, potentially breaking parts of the Fonera firmware and requiring a
factory reset to fix.

Closes: #1049

Location:
trunk/fon/samba3/files/etc/fonstated
Files:
2 edited

Legend:

Unmodified
Added
Removed
  • trunk/fon/samba3/files/etc/fonstated/ReloadSamba

    r2071 r2236  
    6060                f:write("\tdirectory mask = 0700\n")
    6161                f:write("\tforce user = root\n")
     62                f:write("\twide links = no\n")
    6263                f:close()
    6364        end
     
    7273                f:write("\tdirectory mask = 0700\n")
    7374                f:write("\tforce user = root\n")
     75                f:write("\twide links = no\n")
    7476                f:close()
    7577        end
  • trunk/fon/samba3/files/etc/fonstated/RestartSamba

    r2071 r2236  
    6060                f:write("\tdirectory mask = 0700\n")
    6161                f:write("\tforce user = root\n")
     62                f:write("\twide links = no\n")
    6263                f:close()
    6364        end
     
    7374                f:write("\tdirectory mask = 0700\n")
    7475                f:write("\tforce user = root\n")
     76                f:write("\twide links = no\n")
    7577                f:close()
    7678        end
Note: See TracChangeset for help on using the changeset viewer.