Bug#410308: [Pkg-samba-maint] Bug#410308: samba: Samba listing system files under backup share

[Steve Langasek]

On Tue, Feb 13, 2007 at 10:30:16AM -0500, peloy at debian.org wrote:
> On Sat, Feb 10, 2007 at 04:47:46PM +0100, Christian Perrier wrote:
> > Quoting Daniel Fernández (daniel at z-ha-dum.dyndns.org):
> > > Package: samba
> > > Version: 3.0.23d-4
> > > Severity: normal

> > > Samba server list system files under backup share even whent backup
> > > share does not exist. However, the contents of the files cannot be
> > > readed. This bug has been found on etch and sarge systems, in amd64 and
> > > i386 architectures.

> > OK, got it. The "backup" user on Debian systems has a valid home
> > directory:

> > root at mykerinos:/var/log/samba> cd ~backup
> > root at mykerinos:/var/backups>

> > Interesting spot. FWIW, we do provide a fedault [homes] share so that
> > will probably happen with the defautl setup of the package.

> What about adding "backup" to "invalid users" in smb.conf fix this
> problem?

In this context, 'backup' isn't the name of the connecting user, so 'invalid
users' would have no effect.

The evident fix is the one offered by the Ubuntu packaging, to make [homes]
shares accessible by default only to the named user.

-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
vorlon at debian.org                                   http://www.debian.org/