Your message dated Tue, 19 Jun 2018 10:44:01 +0200
with message-id 
<CAFX5sbz29gfjK060DJssbqqX4BY==bhplr5_3g+iy9tzfmj...@mail.gmail.com>
and subject line Closing some samba bugs
has caused the Debian Bug report #678616,
regarding default guest user "nobody"
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
678616: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=678616
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: samba

The default user used by samba to create files of guest users currently
is "nobody", however the filesystem should never contain anything 
belonging to the nobody/nogroup. (see Bug #290623)

Other reasons to rethink the impersonation of nobody, are practical
problems in accessing files created by samba guest users.

May I suggest to introduce a proper samba-guest user and
default to create files of guests on the local filesystem as "samba-guest"
and the (general)  "users" group. (with the default umask 002)

As all real users are supposed to be in the users group this should 
give users full access to the files locally just as through samba.
While at the same time the files are still inaccessible to potentially
vulnerable (system user) deamon processes.



NB: Bug #678615 ("users" group is empty)



--- End Message ---
--- Begin Message ---
Hello,

I'm closing some bugs that are about default upstream configuration settings.

Regards
-- 
Mathieu Parent

--- End Message ---

Reply via email to