The branch, master has been updated
via 287b5f6 param: Remove incorrectly added defaults in AD DC allowing
WORLD WRITABLE files
from 6ac0bdc Add testcase for idmap_rfc2307 module
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master
- Log -----------------------------------------------------------------
commit 287b5f6c0f40d3e3d09bc2ce80f5fee02cbae40f
Author: Andrew Bartlett <[email protected]>
Date: Fri Mar 8 16:49:21 2013 +1100
param: Remove incorrectly added defaults in AD DC allowing WORLD WRITABLE
files
These defaults were incorrectly added in
fc5caffbc139d63cab1ec105884863f73772586f in what turns out to be an
incorrect fix for bug #9462, which was in turn introduced by the
swapping of security mask (default 0777) for create mask (0755) in
6adc7dad96b8c7366da042f0d93b28c1ecb092eb.
While the permissions on sysvol and netlogon (the default shares) were
fixed by provision, any additional shares that did not yet have an
explit ACL set would create world-writable files by default.
Administrators will need to manually correct the file permissions on
any additional shares that were created after installation of the AD
DC.
Andrew Bartlett
Reviewed-by: Michael Adam <[email protected]>
Autobuild-User(master): Andrew Bartlett <[email protected]>
Autobuild-Date(master): Sun Mar 10 12:00:31 CET 2013 on sn-devel-104
-----------------------------------------------------------------------
Summary of changes:
source3/param/loadparm.c | 2 --
1 files changed, 0 insertions(+), 2 deletions(-)
Changeset truncated at 500 lines:
diff --git a/source3/param/loadparm.c b/source3/param/loadparm.c
index ce1c1d8..75b63c5 100644
--- a/source3/param/loadparm.c
+++ b/source3/param/loadparm.c
@@ -3535,8 +3535,6 @@ static void init_locals(void)
lp_do_parameter(-1, "map readonly", "no");
lp_do_parameter(-1, "map archive", "no");
lp_do_parameter(-1, "store dos attributes", "yes");
- lp_do_parameter(-1, "create mask", "0777");
- lp_do_parameter(-1, "directory mask", "0777");
}
}
--
Samba Shared Repository
