[Bug 1701073] Re: CVE-2017-2619 regression breaks symlinks to directories

2017-08-22 Thread Andreas Hasenack
** Merge proposal linked: https://code.launchpad.net/~ahasenack/ubuntu/+source/samba/+git/samba/+merge/329333 ** Changed in: samba (Ubuntu) Status: Confirmed => In Progress ** Changed in: samba (Ubuntu) Assignee: (unassigned) => Andreas Hasenack (ahasenack) -- You received this

[Bug 1701073] Re: CVE-2017-2619 regression breaks symlinks to directories

2017-08-09 Thread Andreas Hasenack
** Merge proposal unlinked: https://code.launchpad.net/~ahasenack/ubuntu/+source/samba/+git/samba/+merge/326418 -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/1701073 Title:

[Bug 1701073] Re: CVE-2017-2619 regression breaks symlinks to directories

2017-08-03 Thread Andreas Hasenack
** Changed in: samba (Ubuntu) Assignee: Andreas Hasenack (ahasenack) => (unassigned) ** Changed in: samba (Ubuntu) Status: In Progress => Confirmed -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to the bug report.

[Bug 1701073] Re: CVE-2017-2619 regression breaks symlinks to directories

2017-07-10 Thread Andreas Hasenack
Reopening the artful task, since the fix isn't there. ** Changed in: samba (Ubuntu) Status: Fix Released => Confirmed ** Changed in: samba (Ubuntu) Assignee: Marc Deslauriers (mdeslaur) => Andreas Hasenack (ahasenack) ** Changed in: samba (Ubuntu) Status: Confirmed => In

[Bug 1701073] Re: CVE-2017-2619 regression breaks symlinks to directories

2017-07-03 Thread Andreas Hasenack
I filed https://bugzilla.samba.org/show_bug.cgi?id=12873 for this ACCESS_DENIED issue that happens when exporting the root filesystem ("/") and using symlinks, which is what the OP wanted fixed here but we ended up diving into https://bugzilla.samba.org/show_bug.cgi?id=12860, which is another

[Bug 1701073] Re: CVE-2017-2619 regression breaks symlinks to directories

2017-07-03 Thread Andreas Hasenack
I get the same access denied error with 4.6.5 packages, built with or without the patch for this particular regression (#12860 upstream) (my 4.6.5 artful test packages: ppa:ahasenack/samba-merge) I think sharing the real root filesytem (/) is not a common scenario. I found one bug upstream

[Bug 1701073] Re: CVE-2017-2619 regression breaks symlinks to directories

2017-07-03 Thread Andreas Hasenack
@dgadomski confirmed. This might be a different bug. We should try with the latest samba (4.6.5) and if it continues happening there, file a bug upstream. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to the bug report.

[Bug 1701073] Re: CVE-2017-2619 regression breaks symlinks to directories

2017-07-03 Thread Andreas Hasenack
** Changed in: samba (Ubuntu) Assignee: Andreas Hasenack (ahasenack) => Marc Deslauriers (mdeslaur) ** Changed in: samba (Ubuntu Xenial) Assignee: Andreas Hasenack (ahasenack) => Marc Deslauriers (mdeslaur) ** Changed in: samba (Ubuntu Yakkety) Assignee: Andreas Hasenack

[Bug 1701073] Re: CVE-2017-2619 regression breaks symlinks to directories

2017-07-03 Thread Andreas Hasenack
** Changed in: samba (Ubuntu Xenial) Assignee: (unassigned) => Andreas Hasenack (ahasenack) ** Changed in: samba (Ubuntu Yakkety) Assignee: (unassigned) => Andreas Hasenack (ahasenack) ** Changed in: samba (Ubuntu Zesty) Assignee: (unassigned) => Andreas Hasenack (ahasenack) **

[Bug 1701073] Re: CVE-2017-2619 regression breaks symlinks to directories

2017-07-03 Thread Andreas Hasenack
xenial is only affected if you use a newer kernel from hwe. For example: - linux-image-4.4.0-83-generic: unaffected - linux-image-4.8.0-58-generic: affected -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to the bug report.

[Bug 1701073] Re: CVE-2017-2619 regression breaks symlinks to directories

2017-07-03 Thread Andreas Hasenack
I haven't seen an issue with symlinks to files. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/1701073 Title: CVE-2017-2619 regression breaks symlinks to directories To manage

[Bug 1701073] Re: CVE-2017-2619 regression breaks symlinks to directories

2017-07-03 Thread Andreas Hasenack
Here, let me update with a simple test case: a) Add this share: [tmp] path = /tmp wide links = no follow symlinks = yes browseable = yes read only = no guest ok = yes b) run: mkdir /tmp/target ln -sf /tmp/target /tmp/symlink-to-target c) failing

[Bug 1701073] Re: CVE-2017-2619 regression breaks symlinks to directories

2017-07-03 Thread Andreas Hasenack
Fix confirmed for artful, test packages here: ppa:ahasenack/samba-dir- symlink-1701073 -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/1701073 Title: CVE-2017-2619 regression breaks

[Bug 1701073] Re: CVE-2017-2619 regression breaks symlinks to directories

2017-06-30 Thread Andreas Hasenack
Testing this branch for artful: https://code.launchpad.net/~ahasenack/ubuntu/+source/samba/+git/samba/+ref /artful-samba-dir-symlink-1701073 -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to the bug report.