At 06:16 PM 11/12/99 -0800, Raymond H. Kraft wrote:
>Hello,
>
>I've run into something that looks like a bug in samba security.  I've
seen it 
>both in 2.0.5a and now in 2.0.6.  The problem is that filesystems mounted by 
>samba via autofs or mount do *not* honor file permissions.
>
>For example, using autofs, I created an auto.hosts mount map entry called 
>"ray".  It's defined as such:
>
>ray
-fstype=smb,username=ray,password=rays_passwd,uid=1501,gid=1501
>   ://brazil/ray
>
>Now, if I log in as another user, say ed, and cd to /net/ray, here's what I 
>see:
>
># ls -l  /net
>drwxr-xr-x   1 ray      ray           512 Nov 12 18:05 ray   
>
># ls -l  /net/ray
>-rwxr-xr-x   1 ray      ray        151484 Nov 12 14:45 large_example.obf
>drwxr-xr-x   1 ray      ray           512 May 11  1999 matlab
>drwxr-xr-x   1 ray      ray           512 Mar  9  1999 public_html
>-rwxr-xr-x   1 ray      ray         16536 Nov 12 14:45 simple_example.obf
>drwxr-xr-x   1 ray      ray           512 Nov 11 13:01 tmp
>drwxr-xr-x   1 ray      ray           512 Nov 11 12:10 transfer
>-rwxr-xr-x   1 ray      ray       5617060 Nov 12 15:48 user_manual.pdf
    
>
>
>The files are all owned by "ray", and ed does not have write permission.  If 
>user ed then tries to edit a new file under /net/ray, this is appropriately 
>not permitted.
>
>HOWEVER, if user ed tries to edit an existing file, permission is granted.
 In 
>short, other users are able to modify existing files.
>
>Am I doing something silly here, or is there a problem with smbfs?
>
>For reference, I'm running RedHat 6.1 with most updates.  The smb host
brazil 
>referenced above is the same Linux box that I'm running on.
>
>TIA.
>
>       -Ray Kraft
>
>
Did you actualy try to save the modified file?  Most editors will let
you edit a "read-only" file, but stop you when you try to save it.

Mikkel

    Do not meddle in the affairs of dragons,
 for you are crunchy and taste good with ketchup.


-- 
To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
as the Subject.

Reply via email to