[FreeNX-kNX] windows/osx shares fail to mount

Boris Savelev boris.savelev at gmail.com
Tue Jul 27 08:25:36 UTC 2010


2010/7/27 Toni Asensi Esteve <asmond at orange.es>:
>> > I could of course set the sticky bit on mount.cifs/mount.smbfs, but i do
>> > not think
>> > that that is the right approach.
>>
>> why not?
>
> As they say:
>        "Setting the setuid bit on mount.cifs is discouraged upstream and opens
>        interesting security vulnerabilities:
>
>        smbfs (2:3.4.5~dfsg-2) unstable; urgency=low
>          * As of this version, the mount.cifs binary is no longer setuid.
>            Upstream has always been increasingly unsupportive of this
>            configuration over time. For instance, in bugs like
>            https://bugzilla.samba.org/show_bug.cgi?id=6853, it is clearly
>            mentioned that having it setuid root is discouraged.
>         -- Christian Perrier <email address hidden> Sat, 06 Feb 2010 15:09:00
>
>        Ubuntu will not deviate from upstream or Debian in that respect. Rather
>        than restoring the missing +s, I suggest you use "sudo" when running
>        mount.cifs. If you need finer-grained control, you can use /etc/sudoers to
>        define a specific group that could run that specific command without having
>        access to the whole thing.
>
> It's explained with more details in
>        https://help.ubuntu.com/community/SettingUpSamba
> where you can search this string:
>        /sbin/mount.cifs
>
> Greetings:
> Toni


oO

I didn't known about this bug. Sorry. Variant with sudo is the best.

-- 
Boris



More information about the FreeNX-kNX mailing list