|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Re: Samba Remote Zero-Day Exploit
paul.szabo
sydney.edu.au
Date: Fri Feb 05 2010 - 18:04:46 CST
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Dear Kingcope,
> Turning off symlink support in samba closes the hole but then no
> access to symlinks created by the administrator is possible ...
Correct.
Maybe what you want is for Samba to add and support an option like
"allow create symlink" (with default "no"). I myself do not think it
would be useful... would surely be a few lines of code only, so if you
want to submit a patch to the Samba team... or just patch your own
servers (as I do, see http://www.maths.usyd.edu.au/u/psz/samba/).
Cheers, Paul
Paul Szabo psz
maths.usyd.edu.au http://www.maths.usyd.edu.au/u/psz/
School of Mathematics and Statistics University of Sydney Australia
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]