Re: [Samba] how to mount shares as a user without mount.cifs setuid

2010-04-09 Thread Gary Dale
Nico Kadel-Garcia wrote: On Thu, Apr 8, 2010 at 2:08 PM, Gary Dale garyd...@rogers.com wrote: Christian PERRIER wrote: Quoting Gary Dale (garyd...@rogers.com): Now perhaps I'm missing something, but I have no trouble with users mounting nfs shares. The idea that users can't

Re: [Samba] how to mount shares as a user without mount.cifs setuid

2010-04-08 Thread Jeff Layton
On Thu, 8 Apr 2010 00:45:20 -0400 Chris Smith smb...@chrissmith.org wrote: On Wed, Apr 7, 2010 at 9:39 PM, Jeff Layton jlay...@samba.org wrote: Yes, we added a patch a while back to make it such that mount.cifs would not allow itself to run as a setuid root program unless it that check was

Re: [Samba] how to mount shares as a user without mount.cifs setuid

2010-04-08 Thread Nico Kadel-Garcia
On Thu, Apr 8, 2010 at 12:45 AM, Chris Smith smb...@chrissmith.org wrote: On Wed, Apr 7, 2010 at 9:39 PM, Jeff Layton jlay...@samba.org wrote: Yes, we added a patch a while back to make it such that mount.cifs would not allow itself to run as a setuid root program unless it that check was

Re: [Samba] how to mount shares as a user without mount.cifs setuid

2010-04-08 Thread Jeff Layton
On Thu, 08 Apr 2010 00:37:30 -0400 Gary Dale garyd...@rogers.com wrote: Jeff Layton wrote: On Wed, 07 Apr 2010 16:44:47 -0400 Gary Dale garyd...@rogers.com wrote: I'm running Debian/Squeeze on an AMD64 system. For some reason they have recently stopped shipping mount.cifs with

Re: [Samba] how to mount shares as a user without mount.cifs setuid

2010-04-08 Thread Gary Dale
Nico Kadel-Garcia wrote: On Thu, Apr 8, 2010 at 12:45 AM, Chris Smith smb...@chrissmith.org wrote: On Wed, Apr 7, 2010 at 9:39 PM, Jeff Layton jlay...@samba.org wrote: Yes, we added a patch a while back to make it such that mount.cifs would not allow itself to run as a setuid root

Re: [Samba] how to mount shares as a user without mount.cifs setuid

2010-04-08 Thread Christian PERRIER
Quoting Gary Dale (garyd...@rogers.com): Now perhaps I'm missing something, but I have no trouble with users mounting nfs shares. The idea that users can't mount cifs shares strikes me as odd and an unnecessary impediment. How about turning the binary we provide in Debian to setuid on the

Re: [Samba] how to mount shares as a user without mount.cifs setuid

2010-04-08 Thread Gary Dale
Christian PERRIER wrote: Quoting Gary Dale (garyd...@rogers.com): Now perhaps I'm missing something, but I have no trouble with users mounting nfs shares. The idea that users can't mount cifs shares strikes me as odd and an unnecessary impediment. How about turning the binary we

Re: [Samba] how to mount shares as a user without mount.cifs setuid

2010-04-08 Thread Nico Kadel-Garcia
On Thu, Apr 8, 2010 at 2:08 PM, Gary Dale garyd...@rogers.com wrote: Christian PERRIER wrote: Quoting Gary Dale (garyd...@rogers.com): Now perhaps I'm missing something, but I have no trouble with users mounting nfs shares. The idea that users can't mount cifs shares strikes me as odd and

Re: [Samba] how to mount shares as a user without mount.cifs setuid

2010-04-07 Thread Udo Müller
Am 07.04.10 22:44, schrieb Gary Dale: How do I mount an smb/cifs share as a normal user without running mount.cifs? Or if I have to mount the share as root, how can I get reasonable access to the shares? Use FUSE. Regards Udo -- To unsubscribe from this list go to the following URL and read

Re: [Samba] how to mount shares as a user without mount.cifs setuid

2010-04-07 Thread Jeff Layton
On Wed, 07 Apr 2010 16:44:47 -0400 Gary Dale garyd...@rogers.com wrote: I'm running Debian/Squeeze on an AMD64 system. For some reason they have recently stopped shipping mount.cifs with the setuid bit set. That would be because it was horribly unsecure. Now it appears that they have

Re: [Samba] how to mount shares as a user without mount.cifs setuid

2010-04-07 Thread Gary Dale
Jeff Layton wrote: On Wed, 07 Apr 2010 16:44:47 -0400 Gary Dale garyd...@rogers.com wrote: I'm running Debian/Squeeze on an AMD64 system. For some reason they have recently stopped shipping mount.cifs with the setuid bit set. That would be because it was horribly unsecure. Now

Re: [Samba] how to mount shares as a user without mount.cifs setuid

2010-04-07 Thread Chris Smith
On Wed, Apr 7, 2010 at 9:39 PM, Jeff Layton jlay...@samba.org wrote: Yes, we added a patch a while back to make it such that mount.cifs would not allow itself to run as a setuid root program unless it that check was compiled out. This was done due to a rather constant stream of security

Re: [Samba] how to mount shares as a user without mount.cifs setuid

2010-04-07 Thread Christian PERRIER
Quoting Jeff Layton (jlay...@samba.org): It's also worthwhile to note that I've recently re-enabled the ability to run mount.cifs as a setuid root program in the latest cifs-utils release: http://linux-cifs.samba.org/cifs-utils/ ...you may want to switch to using that instead if you need