Note: if you use smbclient with -m SMB2, which is what windows7+ uses,
you will see the same failure when doing "ls /opt/opt/*":
root@xenial-samba-symlink-1701073:~# smbclient //localhost/cve-root -U
ubuntu%ubuntu -c "ls /opt/opt/*"
WARNING: The "syslog" option is deprecated
Domain=[WORKGROUP] OS=[Windows 6.1] Server=[Samba 4.3.11-Ubuntu]
. D 0 Fri Jun 30 18:51:00 2017
.. D 0 Fri Jun 30 18:11:18 2017
smb.conf N 1245 Fri Jun 30 18:50:58 2017
root D 0 Fri Jun 30 18:11:18 2017
opt D 0 Fri Jun 30 18:51:00 2017
246776448 blocks of size 1024. 246351744 blocks
available
root@xenial-samba-symlink-1701073:~# smbclient //localhost/cve-root -U
ubuntu%ubuntu -c "ls /opt/opt/*" -m SMB2
WARNING: The "syslog" option is deprecated
Domain=[XENIAL] OS=[] Server=[]
NT_STATUS_ACCESS_DENIED listing \opt\opt\*
root@xenial-samba-symlink-1701073:~#
I'm still investigating, I'm not getting the exact errors described in the
upstream samba bug. They hint that it may depend on the kernel version as well.
I'll stop trying with lxd and use VMs because of that.
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1701073
Title:
CVE-2017-2619 regression breaks symlinks
To manage notifications about this bug go to:
https://bugs.launchpad.net/samba/+bug/1701073/+subscriptions
--
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
