[FreeNX-kNX] windows/osx shares fail to mount
Boris Savelev
boris.savelev at gmail.com
Tue Jul 27 08:25:36 UTC 2010
2010/7/27 Toni Asensi Esteve <asmond at orange.es>:
>> > I could of course set the sticky bit on mount.cifs/mount.smbfs, but i do
>> > not think
>> > that that is the right approach.
>>
>> why not?
>
> As they say:
> "Setting the setuid bit on mount.cifs is discouraged upstream and opens
> interesting security vulnerabilities:
>
> smbfs (2:3.4.5~dfsg-2) unstable; urgency=low
> * As of this version, the mount.cifs binary is no longer setuid.
> Upstream has always been increasingly unsupportive of this
> configuration over time. For instance, in bugs like
> https://bugzilla.samba.org/show_bug.cgi?id=6853, it is clearly
> mentioned that having it setuid root is discouraged.
> -- Christian Perrier <email address hidden> Sat, 06 Feb 2010 15:09:00
>
> Ubuntu will not deviate from upstream or Debian in that respect. Rather
> than restoring the missing +s, I suggest you use "sudo" when running
> mount.cifs. If you need finer-grained control, you can use /etc/sudoers to
> define a specific group that could run that specific command without having
> access to the whole thing.
>
> It's explained with more details in
> https://help.ubuntu.com/community/SettingUpSamba
> where you can search this string:
> /sbin/mount.cifs
>
> Greetings:
> Toni
oO
I didn't known about this bug. Sorry. Variant with sudo is the best.
--
Boris
More information about the FreeNX-kNX
mailing list